Privacy policy
We wish to inform you that Why The Best Hotels Srl will process your personal data as a Data Controller, in full compliance with GDPR 679/2016 concerning the protection of personal data.
Data Controller and Data Processor
In relation to your personal data, you can exercise all rights provided for in Articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of GDPR 679/2016, such as, for example, the changing, deletion, correction, and anything else provided for by the standard by directly contacting the Data Controller: WHY THE BEST HOTELS S.R.L. Viale Machiavelli 18 - 50125 Florence (FI) tel.: +39 055 271841, fax: +39 055 27184199, e-mail: info@wtbhotels.com.
The Hotel collects data both independently (when booking online from its website and when guests check in) or through External Data Processors (hotel booking portals and travel agencies): these are the means that triggers our Data Processing as the Data Controller.
The legal basis for data processing
The legal basis for data processing is the consent of the data subject, which is requested each time and not related to the conferment obtained during the online booking and registration at the hotel.
External Data Processors.
We list below the technical partners whose correspondence is marked by symbols:
- *** Blastness srl, VAT/Tax Identification Number: 01195440118, ENROLLED IN THE ECONOMIC AND ADMINISTRATIVE INDEX OF MILAN 2107189, Registered Office: Galleria del Corso, 2 – 20122 Milan, Italy
- ^^^ MailUp S.p.A. with registered office in Viale F. Restelli 1, 20124 Milan (Italy)
Processing of personal data and related purposes.
Each section described below allows the collection of data for the specific purpose. Failure to complete the fields marked as mandatory (marked with an asterisk) will correspond to a failed conferment of consent, thus preventing the processing of data and, therefore, we will not be able to provide the service requested.
Your personal data, subject to the provision of multiple hospitality services at our structures will be collected by Why The Best Hotels Srl and its technical partners. The data will be recorded and processed on paper and/or with the aid of electronic means and can be stored in special databases. The data will not be used for other purposes, except those required by the current Public Security legislation.
- *** 'Booking' page - the profile of users who ask for information through the 'Booking' page will be used by Why The Best Hotels Srl exclusively for hotel hospitality operations carried out by Why The Best Hotels Srl;
- *** 'Contacts' page - the profile of users who ask for information through the 'Contacts' page will be used by Why The Best Hotels Srl for communications regarding the individual request received by Why The Best Hotels Srl;
- ^^^ 'Mailing list' (newsletter) - the profile of users who subscribe to the 'Newsletter' will be used by Why The Best Hotels Srl for periodic informative and advertising communication related to Why The Best Hotels Srl;
- 'Events' page - the profile of users who subscribe to the 'Events' section will be used by Why The Best Hotels Srl for sporadic informative and advertising communication relative to specific events organised by Why The Best Hotels Srl;
- 'Restaurant' page - the profile of users who subscribe to the 'Restaurant' section will be used by Why The Best Hotels Srl for the booking of catering services provided by the various hotels managed by Why The Best Hotels Srl;
- 'SPA' page - the profile of users who subscribe to the 'SPA' section will be used by Why The Best Hotels Srl for the booking of services provided by Why The Best Hotels Srl's Wellness Centre;
- *** 'Work with us' page - the profile of users who subscribe to the 'Work with us' section will be used by Why The Best Hotels Srl for the possible selection of personnel assigned to Why The Best Hotels Srl;
Use of cookies: the data collected (country of origin, details of the pages visited and duration of stay on the pages above) will be used to prepare statistical and market studies and research - please read the specific information available at the URL: http://www.whythebesthotels.com/it/privacy-policy.html#home
Your data will not be "disseminated", published or disclosed to third parties in Italy, within the European Union or outside the EU. However, your data will be made known to the staff of Why The Best Hotels Srl who have received appropriate training and its technical partners who are nominated and listed under the External Data Processor section in compliance with GDPR.
Why The Best Hotels Srl undertakes not to use personal data reported as inaccurate until the inaccuracy has been corrected.
All data collected for the legitimate interest of the Data Controller will not be published, shared or transferred to third parties, either in Italy or abroad.
Freedom to grant consent, consequences of denial, duration of data retention.
- Booking - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to host you. The data received will be kept for the minimum duration provided for by legal obligations.
- 'Contacts' - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to respond to you. The data received will be kept for 6 months.
- Mailing list (newsletter) - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to provide you with the periodic communication services. The data received will be kept until revoked by the data subject.
- 'Events', 'Restaurant' and 'SPA' - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to provide you with the services requested. The data received will be kept for 6 months.
- 'Work with us' - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to evaluate your Curriculum Vitae. The data received will be kept for 6 months, and will be destroyed after this time.
- cookies - the aggregate collection of the data is automatic and related to the browsing of the website pages. If you do not want your data to be automatically collected, you must stop browsing the website, or you can change the configuration and options available through the instructions on the website.
Rights pursuant to Articles 13 and 14 of GDPR 679/2016.
The data subject can consciously monitor and manage the data flow and, in particular, exercise the following rights:
- (i) the right to access data,
- (ii) the right to ask for the correction, deletion, or the limitation of the processing,
- (iii) the right to oppose to processing,
- (iv) the right to the portability of the data,
- (v) the right to revoke the consent to processing, at any time, and
- (vi) the right to lodge a complaint with the supervisory authorities.
You can exercise all rights provided for in Articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of GDPR 679/2016, by directly contacting the data controller referred to in the section Data Controller and Data Processor
