The Therapeutic Thermal Pool is open every day from 10:00 am to 7:00 pm. Booking recommended. Phone: +39 0572 90771 E-mail: terme@grottagiustispa.com
Book onlinePrivacy Policy & Cookie Law for users visiting this website in accordance with Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
The following information pertains to the use of personal data and cookies on this website.
As for cookies, this notice is provided to the user/browser in accordance with the measure of the Italian Data Protection Authority of June 10, 2021, "Cookie Guidelines and Other Tracking Tools," and in compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data.
In accordance with Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the processing of user/browser personal data while using the services of the site, and the options for contacting and acquiring user personal data, in full compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data, regarding users who access the following websites via electronic means:
https://terme.grottagiustispa.com
This information does not concern other websites, pages, or online services accessible through hyperlinks that may be published on the sites but refer to resources external to the domains.
DATA CONTROLLER
Following the consultation of the aforementioned sites, data relating to identified or identifiable individuals may be processed.
The Data Controller is:
ITA Hotel Investments Holdco 2 S.à r.l.
Via Messina 38 Torre C, 20154 Milano – Italy
privacy@ihchotels.it
Vat ID: 03212990927
DPO (Data Protection Officer)
The owner has identified and appointed the Data Protection Officer, as required by Art 37 of the European regulation for the protection of personal data EU 2016/679, as required by paragraph 6, who can be contacted by email at dpo@schmidtconsulting.it.
CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING
Navigation Data
The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.
This category of data includes, by way of example but not exhaustively, IP addresses or domain names of computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user's IT environment.
These data, necessary for the use of web services, are also processed for the purpose of:
- obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);
- checking the proper functioning of the services offered.
Navigation data does not persist for more than the time strictly necessary and is deleted immediately after its aggregation (except when necessary for the detection of crimes by the judicial authorities).
Data Provided by the User
The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, entail the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications.
Specific information notices will be published on the Data Controller's websites pages dedicated to the provision of specific services.
Cookies and other tracking devices
This website uses cookies to ensure the correct use of the site's contents.
The site uses technical and session cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies on terminals or browsers is under the user's control. On the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for proper functioning.
Banner operation
The privacy management banner activated on this site does not allow any profiling cookies to be activated until the user has given their consent. If the user clicks the "I agree" button, all profiling cookies will be activated. If the user decides to click the "Personalize" button, they can customize their choices and decide which profiling cookies to activate. If the user clicks on the "Reject" button or the "X" in the top right of the banner, no profiling cookies will be activated.
The user's choices will be stored for six months through a technical cookie that will be installed on the device used by the user to access the site. It is essential to explain that if the user changes their device, for example, from a computer to a mobile phone, the choices cannot be transferred to the new device for technical reasons, and they will need to be selected again on the new device.
The user's choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last for six months.
The site uses cookies for third-party profiling as specified below.
Which cookies are installed on this site?
Google Tag Manager
Google Tag Manager is a tag management service provided by Google Ireland Limited. The data sent is collected for the purposes of personalizing the experience and statistical tracking. You can find more information on the "More information on Google's handling of personal information" page.
Place of processing: Ireland - Privacy Policy
Video Vimeo
Vimeo is a video content visualization service provided by Vimeo, LLC. This service is used to integrate content of this kind on its pages.
Place of processing: United States - Privacy Policy
Font Awesome
Font Awesome is a typeface visualisation service provided by Fonticons, Inc. .
Place of processing: United States - Privacy Policy
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports on its activities and share them with other services developed by Google.
Google may use your Personal Data to contextualize and personalize ads in its advertising network.
This Google Analytics integration anonymizes your IP address. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or other countries that are members of the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google's servers and shortened within the United States.
Personal Data collected: Tracker; Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Maps widget
Google Maps is a maps visualization service provided by Google Ireland Limited. This service is used to incorporate content of this kind on its pages.
Place of processing: Ireland - Privacy Policy
Google reCAPTCHA
Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
Place of processing: Ireland - Privacy Policy
Ve Interactive
Ve Interactive is a Remarketing and Behavioral Targeting service provided by Ve Global UK Limited. This service is used to link the activity of this Application with the Ve Interactive advertising network.
Place of processing: United Kingdom - Privacy Policy
Facebook Remarketing
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook Ireland Ltd. This service is used to link the activity of this Application with the Facebook advertising network.
Place of processing: Ireland - Privacy Policy
LEGAL BASIS FOR THE PROCESSING
The personal data indicated on this page is processed by the Data Controller in the performance of the services provided by the website and subsequently, if provided by the website itself, in compliance with contractual or legal obligations.
In case there are specific sections for newsletter subscriptions or marketing services, they will be managed through specific information notices.
OPTIONALITY OF DATA SUPPLY
As provided by the resolution of 10 June 2021 "Guidelines on cookies and other tracking tools", the user of the site is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookie prevents being able to send the request via data acquisition forms. If necessary, it will be possible to re-enable the cookie from privacy preferences, or possibly if you decide to keep the cookie block, send such a request via email.
Apart from what specified for navigation data, the user is free to provide personal data reported in the request forms present on the sites or otherwise indicated in contacts with the structures to request the sending of the newsletter, of informative material or other communications.
Their failure to provide may result in the impossibility of obtaining what is requested.
LEGITIMATE INTEREST
The data controller does not rely on legitimate interest for the processing of personal data except for the protection of their own rights.
PROCESSING METHODS
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
DATA RECIPIENTS
The recipients of the data collected following the consultation of the sites listed above are the subjects designated by the Data Controller, according to Article 28 of the Regulation, as data processors. The complete list of data processors is available at the Data Controller's office and can be requested by email.
The collected personal data is also processed by staff authorized to process it, who act based on specific instructions provided regarding the purposes and methods of the same processing.
DATA TRANSFER
Data will only be transferred within the EU.
Some applications like Google Analytics and reCaptcha may undergo extra-EU transfers.
DATA CONSERVATION PERIOD
The retention time of the user's choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.
DATA SUBJECT RIGHTS PURSUANT TO ART. 15 EU 2016/679
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).