Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA of the users visiting the websites of Hotel Il Salviatino

This page contains a description of the policies for managing the website in regard to processing the personal data of the users who visit the site and their privacy. This information is provided pursuant to article 13 of GDPR 679/2016 – Laws concerning the Protection of Personal Data and the individuals who interact with the web services of Hotel Il Salviatino, which is accessible by telematics means through the following web address https://salviatino.com/ which corresponds to the home page of the official website of Hotel Il Salviatino on Via del Salviatino, 21 – 50137 Firenze. This informative note is provided only for the aforementioned website and not for other websites eventually accessed by the user through links.

THE “CONTROLLER”

Following access to this website, data pertaining to persons that are identified or identifiable may be processed. The “Data Controller” of the personal data collected following a visit to our website or any other data used for providing our services is MPG Italia Srl, Via Salviatino, 12 – 50137 Firenze. The Data Protection Coordinator is Mr. Massimo Bruno, who can be contacted at privacy@salviatino.com.

PLACE WHERE DATA IS PROCESSED

Data processing pertaining to the web services of this website [physically hosted for FIDIM Servizi Srl by Impulso Digitale srl, Via Tonio da Belledo, 13B – 23900 (Lecco) (“impulsodigitale.it“)] is carried out at the aforementioned headquarters and said data is processed only by the technical personnel in charge of processing of the Data Processing Office, or by eventual persons in charge of processing who are entrusted to process occasional maintenance operations.

The personal data obtained from the users who submit hotel reservation requests or through informative material (informative notes, newsletters, registration, etc) is used only to carry out the services or assistance requested and is not transmitted to third parties, except in the following possible cases:

Business partners of MPG Italia Srl, Hotel Il Salviatino to whom MPG Italia Srl transmits the data exclusively in order to avoid on-line reservations, including Serenissima Informatica Spa, Via Croce Rossa, 5 – 35129 Padova and Small Luxury Hotels of the World (https://slh.com/ – UK)
Persons, companies or professional offices who lend assistance and consulting services to MPG Italia Srl, Hotel Il Salviatino concerning accounting, administrative, legal, financial and tax matters;
Subjects who are authorized to have access to the data by law or through requests by the authorities;

CATEGORIES OF PROCESSED DATA

Navigational data

The informatics systems and the software procedures used for the functioning of this website, during their normal functioning, acquire some personal data for which the transmission of said data is implicit in the use of Internet communication protocols. This concerns information that is not collected in order to be associated with identifiable interests but due to its nature, through elaboration and association with data obtained by third parties, could allow identification of the user. The data which fall within this category are: the IP address or the name and domain of the computer used by the user who accesses the website, the address which is revealed in the URI (Uniform Resource Identifier) of the resources requested, the time of the request, the method used in submitting the request to the server, the dimensions of the file obtained as a response, the numerical code indicating the server response status (successful, error, etc.) and other parameters pertaining to the operating system and the informatics used by the user.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of E-mail to the addresses indicated in the website results in the successive obtainment of the address of the sender which is necessary in order to respond to the request, as well as the eventual ulterior personal data inserted into the message. Specific information for synthesis will be progressively reported or seen in the website pages that are designed for particular services and requests. The personal information regarding the individual who visited the website is not collected or used. The visitors remain anonymous. The only exception to this rule concerns the information for personal identification needed to fulfill the contractual obligations of reservations on behalf of the user. In the event of reservations made through the website, the user must provide his name, address, telephone number and information regarding the payment manners and credit card used. MPG Italia Srl will use said information only for elaboration of the reservations and to send specific information, which is relevant to the confirmation of said, such as a receipt, the reservation code and the conditions. The information provided will not be used for marketing purposes and will not be sold, transmitted, given by contract or sent to third parties an any way, with the exception of our provider of on-line reservation services (Data Processor) Small Luxury Hotels of the World (https://slh.com/ – UK) and his sub-processor Sabre GLBL Inc by his Central Reservation System SynXis (www.sabrehospitality.com) appointed to process booking operation, to whom elaboration of the reservations is entrusted to, only for online reservations purposes, together with the Credit Card Companies which can be contacted to check the validity of the bookings.

In any event, the administrator of the website guarantees the use of scrupulous procedures in order to protect the navigational data and the use of particular precautions to protect the data pertaining to the credit card, which is provided during on-line reservations.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Personal Data Processing Collected from Curriculum Vitae

MPG Italia Srl accept Personal Curriculum Vitae of possible candidates via e-mail in PDF format. Providing spontaneous and voluntary of the Curriculum Vitae data will be considered as implicitly informed consent by the data subjects for personal data processing contained, only following the purposes related to the selection of potential candidates. The data processed for the purpose of selection of candidates are personal useful to search for the particular profile. In general, the nature of the data is normal, except in some cases where you may indicate any sensitive data necessary to identify the specific requirements of the regulations, such as specifying a particular protected classes, the suitability for certain jobs and / or start-ups required, within the limits set by the General Authorisation of the Garante no. 1 and 2 of December 15, 2016 (Published in the Official Gazette no. 303 of December 29, 2016);

The provision of data relating to the selection of candidates is required. Any refusal to provide such data makes it impossible to perform an orderly selection and the possible recruitment. The data in question will not be disclosed to anyone.

General Rules for providing the CV

Any CV received spontaneously, replying to a job advertisement, will be stored directly by person in charge of the processing in accordance with the safety guidelines of personal data adopted in compliance with the security measures ex Title V Chapter I and II of the Code and Chapter IV Section 2 of GDPR 679/2016. These will be printed only on the occasion of a meeting and a conversation with the data subject. After the interview, if the candidate is not selected, the CV will be deleted and / or destroyed. In all other cases, the CVs will be stored for 6 months and after will be deleted from the PC and, if printed, they will be destroyed. To send Curriculum Vitae use the following addresses: Human Resources Dpt Il Salviatino, Via del Salviatino, 21- 50137 Firenze – c.a. E-mail: info@salviatino.com

PERIOD FOR DATA RETENTION – CRITERIA USED

According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation (EU) 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for a period not exceeding the purposes for which the personal data were collected and subsequently processed.

Data retention periods depend on the purposes of the processing:

purposes related to technical navigation data for the correct functioning of the website: retention only for the related session, after which the data are deleted;
purpose of reply to info request/services supply request (up to 12 months for contact requests; 10 years for administrative / accounting / financial documentation relating to the provision of a service);
data collection for staff recruitment (up to 6 months);
newsletter, marketing or promotional communications in general (up to 24 months), until withdrawal of consent;
purpose of administrative / accounting / financial management: 10 years as as required by law for the conservation of administrative / accounting / financial documentation.