Privacy Policy

INFORMATION TO BE PROVIDED TO THE DATA SUBJECT DATA NOT COLLECTED FROM THE DATA SUBJECT (according to art. 14 GDPR 2016/679)

PROCESSING: Website
Dear Data Subject, Below we provide you with some information that must be brought to your attention, not only to comply with legal obligations but also because transparency and fairness towards data subjects is a fundamental part of our activity.
The Data Controller of your personal data is Le Agavi Hotel a Positano Srl, responsible to you for the legitimate and correct use of your personal data, and whom you can contact for any information or request at the following addresses:
Data Controller: Le Agavi Hotel a Positano Srl
Head Office: Via Ruoppolo, 105 - 80128 Naples, NA, IT
Contact Information:
PEC: leagavihotelapositano@pec.agavi.it

Your personal data is collected and processed for the purposes listed below, along with the corresponding legal basis:
•    Sale via telematics or broadcasting
Data Categories: Bank details; Payment card data; Contact details (phone number, email, etc.); Tax code and other personal identification numbers; Name, address, or other elements of personal identification.
Legal Basis: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the same.
•    Marketing (market analysis and surveys)
Data Categories: Behavioral data, user profiles, consumers, taxpayers, etc.; Lifestyle and consumption habits; Contact details (phone number, email, etc.); Geolocation; Third-party cookies; Remarketing cookies; Technical cookies.
Legal Basis: The data subject must give consent to the processing of their personal data for the specific purpose.
•    Advertising
Data Categories: Contact details (phone number, email, etc.)
Legal Basis: The data subject must give consent to the processing of their personal data for the specific purpose.
•    Customer satisfaction survey
Data Categories: Contact details (phone number, email, etc.)
Legal Basis: The processing is necessary for the legitimate interest of the data controller or third parties.
The processing of your data is based on the legitimate interests of the data controller recognized by law, in particular:
•    Legitimate Interest of the Controller:
Customer satisfaction survey.
Customer or user satisfaction statistics.
Your personal data collected fall into the following categories:
Bank details; Payment card data; Behavioral data, user profiles, consumers, taxpayers, etc.; Lifestyle and consumption habits; Contact details (phone number, email, etc.); Geolocation; Third-party cookies; Remarketing cookies; Technical cookies; Tax code and other personal identification numbers; Name, address, or other elements of personal identification.
Your data may be sent to the recipients or categories of recipients listed below:
•    Recipient Categories:
Employers (Controller), Companies and firms (Cookie management companies).
The Data Controller intends to transfer your data to Third Countries outside the European Union or to an international organization as described below:
•    Destination of transfer: United States of America
Regarding the transfer of your data, we inform you that this occurs in the presence of an adequacy decision by the European Commission (art. 45 Regulation EU 2016/679), the details of which are provided below:
Adherent to the EU-US Privacy Shield regarding the Swiss-US Privacy Shield.
In addition to this information, to ensure the most correct and transparent processing of your data, you should be aware of the following:
•    The duration of the processing is determined as follows: Processing with a predefined duration of 1 year.
You have the right to request from the data controller access to your personal data and the rectification or erasure of the same or the restriction of processing concerning you or to object to their processing.
If you have given consent for one or more specific purposes, you have the right to withdraw such consent at any time.
You have the right to lodge a complaint with the following Supervisory Authority:
The source from which your data was obtained is as follows:
The data is collected from the main servers of the hosting management company. They are located in Italy and, in any case, within the European Union.
The data subject has the right to data portability.
Personal data is used for automated decision-making processes in the context of their processing, in particular:
The data collection begins with the acceptance of cookies, which collect the necessary data to analyze the user's behavior during the website visit and their preferences. Remarketing cookies are also activated, which can re-offer the user services similar to those searched for during the limited time the cookie is active. The data is anonymized, and we are unable to identify the user in any way.
•    Consequences, methods, and purposes of profiling
Profiling occurs through the user's acceptance of cookies. The purposes are exclusively for advertising and marketing and allow the customer to be re-offered searches made during the use of the site.
The data subject has the right to obtain human intervention from the data controller, to express their opinion, and to contest the decision.

The data subject has the right at any time and free of charge to object to the processing, including initial or further processing, including profiling to the extent that it is related to direct marketing.

Naples, 25/05/2018