Cookie Policy and Privacy

Data Controller

We inform you that, pursuant to Legislative Decree 196/2003, containing provisions for the protection of individuals and other subjects with respect to the processing of personal data, STEFANO FERRARIS is the data controller of the personal data provided by you, or otherwise acquired in the context of the activity. For the processing of personal data, we mean their collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction or the combination of two or more of these operations. The data provided by you will be processed for the following purposes: - to provide the service and/or supply the products purchased by you; - in relation to contractual, pre-contractual or legal obligations, exclusively for administrative and accounting purposes: -to execute the transaction that the user is performing; - to fulfill legal obligations; - for operational, regulatory, fiscal and management needs. The data will not be communicated to other subjects, except for the shipping company in charge of delivering the goods (Poste Italiane S.p.a. or another courier duly agreed with the customer), nor will they be disseminated to third parties. The following data will be collected: - the customer's first and last name; - the customer's address; - personal e-mail address; - telephone number; - tax code and VAT number (the latter only if an invoice is required, and in any case if it is a company or freelancer). The requested data are necessary to execute the commercial transaction and/or the provision of information services, and in the absence of even one of them, it will not be possible to provide the goods or the service, as the data controller will not be able to comply with the pre-contractual, contractual, regulatory and tax obligations. The processing of data will take place using suitable tools to ensure their security and confidentiality and may also be carried out through paper media and/or automated tools designed to store, manage and transmit the data themselves. We also inform you that, in accordance with Article 13 of Legislative Decree 196/2003, the interested party may obtain from the data controller confirmation of the existence or not of their personal data, and that such data be made available to them in an intelligible form. The interested party may also request to know the origin and content of the data as well as the logic on which the processing is based; to verify its accuracy or request its integration or updating, or its rectification pursuant to Article 7 of Legislative Decree 196/2003; to obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law; to object, for legitimate reasons, to the processing itself. The data controller informs you that further information regarding the processing and communication of your personal data may be requested in writing from the data processing manager at the following e-mail address: olen@mhhotels.it For further information regarding your privacy rights, we invite you to visit the website of the Privacy Guarantor at www.garanteprivacy.it.

Types of Data collected

Among the Personal Data collected by this website, either independently or through third parties, are: Cookies, usage statistics, Email, First and Last Name. Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed at the time the Data is collected. Personal Data may be entered voluntarily by the User, or automatically collected during navigation on the website. Any use of Cookies - or other tracking tools - by the website or the third-party services used by the website, unless otherwise specified, has the purpose of identifying the user and recording their preferences for purposes strictly related to the provision of the service requested by the User in order to maximize the User Experience and the quality of the use of the information on the site. Failure by the user to give authorization or inhibit the use of Cookies may prevent this Website from properly providing its services. The user is responsible for the personal data of third parties published or shared through this site and guarantees the right to communicate or disseminate them, releasing the Owner from any responsibility towards these third parties.

Methods and location of Data processing

The Data Controller processes Users' Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the stated purposes. In addition to the Data Controller, in some cases, certain categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administration staff) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller, if necessary, may have access to the Data. The updated list of Data Processors may always be requested from the Data Controller. Location The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Owner. Times The Data is processed for the time necessary to provide the service requested by the User, or required by the purposes described in this document, and the User may always request that the processing be interrupted or the Data be deleted.

Purposes of Data processing

User Data is collected to allow the Data Controller to provide its services, as well as for the following purposes: Statistical analysis, acquire information to contact the user, allow interaction with social networks and the use of external platforms for viewing content and information from external platforms. The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services: Contact Forms: By filling in the contact forms present on the site with their Data, the User consents to the use of the information communicated to respond to requests for information, quotes, or any other nature indicated in the heading of the form. The personal data that may be collected are: surname, name, company name, email, telephone number, description of the request. Interaction with social networks and external platforms: These installed widgets or plugins allow interactions with social networks or other external platforms, directly from the pages of this website. The interactions and information acquired by this website are in any case subject to the User's privacy settings for each social network. Statistical Analysis: The use of the Google Analytics tracking code contained in the site allows the Data Controller to monitor and analyze traffic data and serves to track the User's behavior. In order not to use profiled Cookies, Google Analytics with anonymized IP (Google Inc.) is used on this site. Google Analytics is a web analysis service provided by Google Inc. ('Google'). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. This integration of Google Analytics anonymizes your IP address. Anonymization works by truncating your IP address within the boundaries of the Member States of the European Union or other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and truncated within the United States. Personal data collected: Cookies and Usage Data. Place of processing: USA - Privacy Policy - Opt Out. Viewing content from external platforms: These services allow you to view content hosted on external platforms directly from the pages of this Application and to interact with it. In the event that such a service is installed, it is possible that, even if the Users do not use the service, it may collect traffic data relating to the pages on which it is installed. Facebook Like button and social widgets (Facebook, Inc.): The 'Like' button and Facebook social widgets are interactive services with the Facebook social network, provided by Facebook, Inc. Personal data collected: Cookies and Usage Data. Place of processing: USA - Privacy Policy. Youtube Video Widget (Google Inc.): Youtube is a video content viewing service managed by Google Inc. that allows this Application to integrate such content within its pages. Personal data collected: Cookies and Usage Data. Place of processing: USA - Privacy Policy.

Further information on processing

Defense in court: The User's Personal Data may be used by the Data Controller for defense in court or in the preparatory stages of its possible establishment, from abuses in the use of the same or of the related services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data upon request of the public authorities.

Specific information

Upon request by the User, in addition to the information contained in this privacy policy, this website may provide the user with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Application and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

More information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of rights by Users

The subjects to whom the Personal Data refers have the right at any time to obtain confirmation of the existence or not of the same from the Data Controller, to know its content and origin, to verify its accuracy or request its integration, cancellation, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests must be addressed to the Data Controller. This site does not support 'Do Not Track' requests. To find out if any third-party services used support them, consult their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to users on this page. Please therefore consult this page frequently, taking as reference the date of last modification indicated at the bottom. In case of failure to accept the changes made to this privacy policy, the user is required to cease browsing this website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.

Information about this privacy policy

The Data Controller is responsible for this privacy policy.

Personal Data (or Data)

Personal data constitutes any information relating to an identified or identifiable natural person, even indirectly, by reference to any other information, including a personal identification number.

Usage Data

These are the personal data automatically collected by the Application (or by third-party applications it uses), including: IP addresses or domain names of the computers used by the User connecting to the Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time connotations of the visit (e.g. the time spent on each page), and the details regarding the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's computer environment.

User

The individual using this Application, who must coincide with the Data Subject or be authorized by them and whose Personal Data is the subject of the processing.

Data Subject

The natural or legal person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public administration and any other entity, association or organization to which, even jointly with another owner, the decisions regarding the purposes, methods of processing personal data and the tools used, including the security profile, in relation to the operation and use of this site, are responsible. The Data Controller, unless otherwise specified, is the owner of this website.

This Website

The tool composed of the HTML pages displayed by the browser through which Users' Personal Data is collected.

Cookies

Small text files containing information and stored on the device used by the User to browse the website.

Legal references

Notice to European Users: This privacy policy is drafted in fulfillment of the obligations set forth in Art. 10 of Directive 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies. This privacy policy concerns exclusively this Website.