Data processing policy compliant with the GDPR
This privacy statement on data processing is valid for websites managed by the Booking Tebaide platform owned by Tebaide Media S.r.l..
In the following statement we provide information concerning the collection of personal information when using our website. Personal information refers to all data that concern you as a person, such as your full name, address, email address or user behaviour. Protecting your personal information is very important to us. If you have any questions or would like more information on data protection at Booking Tebaide, please contact us at privacy@tebaide.it.
Ongoing technological development, changes to our services or legal status, and other reasons may require amendments to be made to our data protection notice. Therefore we reserve the right to change this data processing statement at any time and we ask you to keep yourself constantly informed about updates.
1 Data Controller
The data controller is
Hotel Garni Riviera
Via Roma, 1 25084 Gargnano (BS)
e-mail: info@garniriviera.it
2 Data Processor
The data processor is Tebaide Media S.r.l. based in Salò (BS) Italy, via Cavagnina no. 17, email: privacy@tebaide.it
3 Your rights
Your rights with respect to your personal information are as follows:
3.1 General rights
You have the right to access information, to correction, to deletion, to restrict processing, to object to processing and data portability. If the processing is based on your consent, you have the right to withdraw such consent with future effect.
3.2 Rights related to the processing of data on the basis of legitimate interests
Pursuant to Article 21, paragraph 1 of the General Data Protection Regulation (GDPR), you have the right to object at any time against the processing of personal information relating to you, for reasons arising from your particular situation, pursuant to Article 6, paragraph 1 of the GDPR (processing of data in the public interest) or Article 6, par. 1 f of the GDPR (data processing for the protection of a legitimate interest. If you refuse to consent, we will no longer process your personal information, unless we are able to establish compelling and legitimate reasons for its processing that prevail with respect to your interest, your rights and your freedoms, or in the event that the processing is necessary to assert, to exercise or defend rights in court.
3.3 Right to lodge a complaint with the supervisory authority
You also have the right to complain to a competent data protection supervisory authority regarding our processing of your personal information.
4 Collection of personal information while browsing our website
If you are using the website for informational purposes only, that is, without registering or otherwise providing us with information, we will only collect personal information that your browser transmits to our server. If you want to browse our website, we collect the following data that we technically need to make our website viewable and ensure its stability and security. Only in the case of suspected improper use with regarding bookings will we use the information referred to in this link to facilitate identification of the person responsible. The legal basis for this processing is Article 6 (1) (f) of the GDPR:
IP address, date and time of the request, time zone difference with Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred in each case, website that receives the request, browser, operating system and related interface, language and software version of the browser.
5 Contact by email or contact form
When you contact us via email or through a contact form, we will store the data you provide (your email address, possibly your name and telephone number) in order to answer your questions. As we use our contact form to request data that is not strictly necessary to contact you, we have always marked the field as optional. This information is used to discuss your request and improve its handling. The above information is expressly provided on a voluntary basis and with your consent, pursuant to art. 6 par. 1 of the GDPR. With regard the information relating to communication channels (such as your email address or telephone number), you also authorise us to contact you, if necessary, using such channels in order to respond to your request. Naturally, you can withdraw this consent at any time, with future effect.
We will delete the data collected in this area of interest after their storage is no longer necessary, or, in the presence of legal obligations concerning their conservation, we will limit their processing.
6 Newsletter
6.1 General information
By expressing your consent pursuant to art. 6 par. 1 a of the GDPR, you can authorise our newsletter being sent to you, which will keep you informed about our current offers.
In addition, we save the IP addresses you use and the times you registered and confirmed. The purpose of this is to verify your registration and, if necessary, inform you about the possible misuse of your personal data.
Your email address is the only data required to send you the newsletter. The provision of additional and separately marked data is voluntary and will be used to address you directly. After your confirmation, we will save your email address in order to send you the newsletter. The legal basis art. 6 par. 1 of the GDPR.
You can withdraw your consent to receive the newsletter at any time and cancel your registration. You can withdraw by clicking on the link in each newsletter or by contacting the aforementioned data processor.
6.2 Newsletter tracking
Please note that when sending the newsletter we assess your user behaviour. This purpose of this assessment is to send emails that include "web beacons" or tracking pixels, which are stored on our website. For this assessing, we link the aforementioned data and the web beacons to your email address and an individual ID.
Once we have received the data, we generate a user profile to adapt the newsletter to your personal interests. By doing so, we record when you read our newsletters, which links you click on, and from which we deduce your personal interests. Then we link this data to the actions you perform on our website.
You can refuse this tracking at any time by clicking on the separate link provided in each email. The information will be saved as long as you are subscribed to the newsletter. Once you have withdrawn from this option, we will save the data anonymously and for statistical purposes only.
Likewise, tracking will not be possible if you have turned off the default display images setting in your email application. In this case, the newsletter will not be displayed completely and you will not be able to use all the features. If you enable manual display images, the aforementioned tracking will be performed.
7 Account
You have the possibility to sign up to our service and to create a user account. During registration, we collect and save the following data:
- Email
- Password
Specifying the aforementioned data is mandatory; all other information can be provided voluntarily using our portal.
After registration, you will receive personal password-protected access and you will be able to view and manage the data you have stored. Registration is voluntary, but may be required as a condition to use our services.
We save this information until you permanently delete your access. However, we will save the data you provide on a voluntary basis for the time you use the portal, unless you delete them first. You will be able to manage and edit all the information in your protected user account. The legal basis is Article 6, par. 1 points a, b and f of the GDPR.
8 "Hotel Back Office" feature
Hoteliers can manage their hotel's profile using the "Hotel Back Office". In order to use this feature, you must first register. During registration, we collect and save the following data:
- Position
- Name and surname
- Email address of the business
- Telephone number of the business
- Password
Specifying the aforementioned data is mandatory; all other information can be provided voluntarily using our portal.
After registration, you will receive personal password-protected access and you will be able to view and manage the data you have stored. The data collected will be used exclusively for establishing the contractual relationship between Booking Tebaide and the respective hotelier. The data will not be shared with third parties. The legal basis for data processing is Article 6, par. 1 points a and b of the GDPR.
9 Facebook Connect
We offer you the possibility to sign up and log in through your Facebook account. If you sign up with Facebook, Facebook will ask you for permission to provide us with some data linked to your Facebook account. Such data may include your name, surname and email address so that we can verify your identity and gender, as well as your general location, a link to your Facebook profile, your time zone, your date of birth, your profile picture, your "likes" and your friends.
Facebook will collect such data and send it to us in accordance with the policies outlined in the Facebook Privacy Policy. You can manage the information we receive from Facebook by changing your privacy settings in your Facebook account.
This data will be used to establish, provide and personalise your account. The legal basis is Article 6, par. 1 points a, b and f of the GDPR.
If you sign up to our service through Facebook, your account will be automatically linked to your Facebook account and information about the activities you perform on our website, if applicable, will be shared on Facebook and published in your timeline and the news feed.
10 Google+
You can sign up and log in using your Google+ account. If you sign up with Google+, Google will ask you for permission to provide us with some data related to your Google+ account. This information may include your name, surname and email address so that we can verify your identity and gender, as well as a link to your Google+ profile, your profile picture and your friends. Google will collect such data and transmit them to us in accordance with the policies outlined in the Google privacy policy.
If you sign up using Google+, information about the activities you perform on our websites will be visible by default on Google to all people in your Google+ circles and will be shared with Google in accordance with Google's terms and conditions of use and the Google privacy policy. You can find more information about managing shared activities in your Google+ account on the Google support page. You can choose which people in your Google+ circles can see what you do on our website from the Google+ app settings page.
This data will be used to establish, provide and personalise your account. The legal basis is Article 6, par. 1 points a, b and f of the GDPR.
11 Use of cookies
Cookies will be stored on your device when using our website. Cookies are small text files that are stored on the hard drive assigned to the browser you use and through which the location where the cookie is set acquires certain information. Cookies can not run programs or transmit viruses to your device. They are used to make the website more user-friendly and overall more efficient. We also use cookies to identify you next time you visit.
This website uses the following types of cookies, whose purpose and function are explained below:
11.1 Temporary cookies
These cookies are automatically deleted when the browser is closed. Session cookies form part of this category; they save a "session ID" with which different requests from your browser can be assigned to the joint session. This allows your device to be recognised again when you return to our website. Session cookies are deleted when you exit or close the browser.
11.2 Persistent cookies
These cookies are automatically deleted after a specific length of time that may vary depending on the cookie. You can delete the cookies using your browser's security settings at any time.
11.4 Blocking cookies
You can configure the browser and app settings according to your preferences and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that in this case you may not be able to use all the features of the website.
11.5 Legal basis and storage period
The legal basis for any processing of personal information and its storage period vary from case to case and are described in the following sections.
12 Analysis
For the purposes of analysing and optimising our websites, we use the various services described below. This allows us to analyse, for example, how many users visit our website, what is the most requested information and how users find the website. The data we collect include the websites from which users arrive to another website ("referrer"), which subpages of the website they access and how often and for how long they view a subpage. In this way we are able to develop and improve our website in order to make it more user-friendly. The collected data are not used to personally identify individual users. Anonymous data or that under pseudonyms will be collected. The legal basis for this topic is Article 6, par. 1 point f of the GDPR.
12.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, United States). This use covers the operating mode of Universal Analytics. In this way it is possible to assign data, sessions and interactions on several devices to a user ID with a pseudonym and then analyse the activities of a user on all the devices.
Google Analytics uses cookies to analyse your use of the website. The information generated by the cookie through the use of this website is generally transmitted and stored on a Google server in the United States. If IP anonymisation is activated on this website, however, your IP address will be truncated in advance in European Union Member States or other European Economic Area Member States. Only under exceptional circumstances the full IP address will be transmitted to a Google server in the United States and subsequently truncated. The IP address transmitted by your browser as part of Google Analytics will not be linked to other Google data. Google will use this information in order for this website operator to evaluate the use of the website so that reports on website activity and other services related to the website and internet usage for the website operator can be compiled. Our legitimate interest in data processing is also justified for these purposes. The legal basis for using Google Analytics is Article 6, par. 1 point f of the GDPR. Data sent by us and linked to cookies, user information (such as user ID) and promotional IDs are deleted after 14 months from the last use of our services. Data whose storage period has expired are automatically deleted once a month. More information on the terms and conditions of use and data protection is available at https://www.google.com/analytics/terms/us.html and https://policies.google.com/?hl=us
You can prevent cookies from being saved by setting your browser accordingly; however, please note that by doing so you may not be able to fully use all the features of the website. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the add-on https://tools.google.com/dlpage/gaoptout?hl=us. Deactivation cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from being collected on various devices, you must disable it on all systems in use. Set the deactivation cookie by clicking here: Disable Google Analytics
12.2 Google Tag Manager
For purposes of transparency, we inform you that we use Google Tag Manager. Google Tag Manager does not collect any personal information. Google Tag Manager facilitates the integration and management of our tags. Tags are small pieces of code that serve, for example, to measure traffic and user behaviour, record the effects of online advertising and social channels, set remarketing, focus on target groups and test and optimise websites. If you have disabled them, Google Tag Manager will take them into account. For more information on Google Tag Manager, visit: https://www.google.com/analytics/tag-manager/use-policy/
When a user clicks on an ad, Google places a cookie on the user's device. For more information on the cookie technology used, consult Google's information on website statistics and related information on data protection.
13 Data transmission
Your data will not be transmitted to third parties as a general rule, unless we are legally bound to do so, or that the data transmission is not necessary for the application of contractual relationships, or that you have not previously provided the express consent to transmit your data.
External service providers, such as payment service providers, will only receive your information that is necessary to process your request or booking. In these cases, however, the scope of the data is kept to the minimum necessary. If our service providers come in contact with your personal information, we will ensure that this complies with the requirements of data protection regulations, in the same way as when processing your order, pursuant to Article 28 of the GDPR. Also refer to the respective data privacy policy of the provider. The respective provider is responsible for the content of third-party services, even if we verify that the services are reasonable to comply with legal requirements.
We have focused on the processing of your data in the EU/EEA area. However, it may so happen that we resort to service providers that process data outside EU/EEA countries. In these cases, we ensure that a reasonable level of data protection is applied to the recipient, before transmitting your personal information. This means that a level of data protection is achieved through standard EU contracts or a suitable decision, comparable to EU legislation.
14 Data security
We have taken extensive technical and operational security precautions to protect your data from manipulation, loss, destruction or accidental or intentional access by unauthorised persons. Our security measures are regularly reviewed and updated to keep up with technological advances.
Booking Tebaide - Update May 2018
The thick walls, high ceilings, marble stairs, the roof terrace: Everything in this old house, speaks of a simple and elegant tourism past.
'Our cozy rooms and a bar with stone walls will be your companions in blissful relaxation.
You're booking with the best price.
Booking with us, your datas are safe.