Privacy Notice on the Processing of Personal Data

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Data Controller

The Data Controller is:

HOTEL RESIDENCE NOVECENTO DI ARRIGONI A. & C. S.A.S.
Viale D'Annunzio 30
47838 Riccione (RN)
P. IVA 02235600406
Email: info@hotelnovecento.it

1. Types of data processed

The following personal data may be processed:

  • identification data (first name, last name)
  • contact details (email, telephone)
  • data provided via contact forms or quotation request forms
  • data relating to stays and requests for information
  • browsing data (IP, logs, device)
  • cookies and online identifiers

2. Purposes and legal basis of processing

a) Responding to requests and quotations

Handling requests submitted via the website.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures)

b) Managing bookings and contractual obligations

Managing stays, bookings and requested services.
Legal basis: Article 6(1)(b) GDPR

c) Compliance with legal and tax obligations

Accounting and administrative obligations.
Legal basis: Article 6(1)(c) GDPR

d) Marketing and newsletters

Sending promotional communications and offers.
Legal basis: consent (Article 6(1)(a) GDPR)
Consent may be withdrawn at any time.

e) Security and prevention of abuse

Protecting the website and preventing unauthorised access.
Legal basis: legitimate interest (Article 6(1)(f) GDPR)

3. Methods of processing

Processing is carried out using IT and telematic tools, with appropriate security measures to protect the data.

4. Data retention

Data is retained for the time necessary for the stated purposes and in accordance with legal obligations.
Marketing data is retained until consent is withdrawn.

5. Recipients of the data

Data may be disclosed to:

  • hosting and IT providers
  • booking system providers
  • tax and administrative advisers
  • entities to whom disclosure is required by law

The data is not disseminated.

6. Third-party tools used

The website uses:

  • Google Analytics 4 
  • Meta Pixel (Facebook) 
  • YouTube embed 
  • Google Fonts 
  • Google reCAPTCHA 
  • WhatsApp click-to-chat 
  • Cookie Script (consent management) 

7. Transfers of data outside the EU

Some providers (Google, Meta) may process data outside the EU with appropriate safeguards (Standard Contractual Clauses).

8. Rights of the data subject

Users may exercise the rights provided for under Articles 15–22 GDPR:

  • access
  • rectification
  • erasure
  • restriction
  • objection
  • data portability
  • withdrawal of consent

Requests: info@hotelnovecento.it

9. Complaint

A complaint may be lodged with the Italian Data Protection Authority (Garante per la protezione dei dati personali).