top of page


Dear User,
this information is provided pursuant to art. 13 of
European Regulation 2016/679 on the protection of
personal data, taking into account the Recommendation n.
2/2001 adopted on May 17, 2001, to users who access
to the website https: // and is related to all
personal data that the Data Controller collects and holds on its own
The information is provided for the website https: // and not for other websites and / or
applications that may be consulted by the user via links
to external pages of third parties.
The data controller is Hotel Serena 
, with headquarters in Via Garibaldi n. 27 - 48025
Riolo Terme (RA), VAT number:, Tel: +39 0546 71183
Fax: +39 0546 71183, Email:
The data will be stored in the company's databases
Provider of the Server which the Data Controller relies on, at date
centers located within the European Union.
Data processing usually takes place at the headquarters of
Data controller, by staff or external collaborators
duly designated as data processors or
in charge of processing.
Personal data collected and processed by the Data Controller
through this website are referable to the following
The optional, explicit and voluntary sending of messages to
contact addresses of the Data Controller involves the acquisition of
contact details of the sender necessary to reply, as well as
of all personal data included in the communications.
The user, by filling in the appropriate form of
information request placed in the Request info section of the
website, can send a request to Hotel Serena by providing
directly their personal data such as name and surname,
email address and, optionally, telephone number. Failure,
inaccurate or partial provision of data could have
as a consequence the inability to be contacted and / or to
receive the requested information.
The user, by filling in the appropriate form of
check availability may request availability check
of rooms at the Hotel Serena for a certain period,
providing the requested data directly and, in particular, the
your name, surname and email address. Such data are
provided directly by the data subject and failure, inaccurate or
partial provision of data could have as
consequently the inability to receive the information
requests and to obtain a quote for the indicated period.
By browsing the website, the Data Controller collects
automatically some data, cd navigation data. THE
IT systems and software procedures in charge of
operation of this website acquire, in the course
of their normal exercise, some personal data whose
transmission is implicit in the use of the protocols
Internet communication. This is information you don't
are collected to be associated with identified interested parties,
but which by their very nature could, through
processing and association with data held by third parties or by
data controller, to allow users to be identified.
This category of data includes IP addresses or names a
domain of the computers used by the users who connect
to the site, the addresses in URI notation of the requested resources,
the time of the request, the method used in submitting the
request to the server, the numeric code indicating the status of the
response given by the server (successful, error, etc.) and others
parameters related to the operating system and the environment
computer scientist of the user. These data, necessary for use
of web services, are also treated in aggregate form
in order to:
- obtain statistical information on the use of services (pages
most visited, number of visitors by time slot o
daily, geographical areas of origin, etc.);
- check the correct functioning of the services offered.
The personal data provided may be disclosed
to appropriately appointed recipients who will process the data
as data processors and / or as
in charge.
In particular, the personal data of the interested party may
be communicated to recipients belonging to the following
categories: competent authorities for the fulfillment of obligations of
law and / or provisions of public bodies, upon request;
repair and / or maintenance company of
computer equipment; 3) companies that manage the
website and, in general, to allow suppliers to perform
technical, logistical and other activities on our behalf. THE
our suppliers only have access to personal data that
they are necessary to carry out their duties, and they are committed
not to use the data for other purposes, and are required to process the
personal data in compliance with current regulations.
The Data Controller does not communicate any to third parties
the information of the data subjects without their consent,
except where required by law. In any case, the
dissemination of personal data processed.
The complete list of data processors, of
co-owners and persons in charge of processing personal data
can be requested by sending a specific request to the address
The data are processed exclusively for the purposes for which
are collected, as described below. The owner of the
treatment uses the data provided by the interested parties to:
1. Fulfill legal obligations, regulations,
community legislation;
2. Management of sending the requested information
via the contact form. The legal basis of the
processing is the execution of a contract referred to by the interested party
is part of or to the execution of pre-contractual measures adopted on
request of the same. The provision of personal data for
the aforementioned purpose is optional, but in default it will not be
possible to proceed with the management of the request
3. Purpose of research / statistical analysis on data
aggregated or anonymous, therefore without the possibility of identification
the user, aimed at measuring the functioning of the Site, measure
traffic and evaluate usability and interest;
Personal data are processed with automated tools and
manuals for the time strictly necessary to achieve
the purposes for which they were collected.
Personal data are permanently deleted after 3 months
from collection, unless required by law
archiving for longer periods of time.
Specific security measures are observed to prevent
loss of data, illicit or incorrect use and non-access
Pursuant to art. 15 - 21 of EU Regulation 2016/679 a
each interested party is recognized a series of rights.
Right of Access: the interested party, pursuant to art. 15, is entitled
to obtain confirmation that a treatment is in progress
personal data concerning him and, if necessary, to obtain them
copy. He also has the right to obtain access to the data
personal data concerning him and further information such as
purpose of the processing, the categories of recipients, the period
of data retention and exercisable rights.
Right of rectification: the interested party, pursuant to art. 16, is entitled
to obtain the correction of inaccurate personal data that
concern or integration of the same.
Right to cancellation: the interested party has the right to obtain
the deletion of personal data concerning him, without
unjustified delay, if one of the foreseen reasons exists
from art. 17.
Right to limitation of treatment: the interested party has the right,
in the cases provided for by Article 18 of Regulation 2016/679, of
obtain the limitation of the processing.
Right to data portability: the interested party has the right to
receive in a structured, commonly used and readable format
from automatic device, personal data concerning him
and has the right to transmit such data to another holder without
impediment, according to the provisions of art. 20 of
Regulation 2016/679;
Right to object to processing: the interested party has the right to
oppose the processing of personal data concerning him
in accordance with the provisions of art. 21 of the Regulation
The interested party also has the right to lodge a complaint with the Authority
competent control, the Privacy Guarantor.
The requests referred to in the previous points must be
addressed in writing to the Data Controller
treatment will provide, within the time limits established by
current legislation, to provide prompt response to
requests to exercise the rights of the interested parties.
The Data Controller reserves the right to modify,
supplement or periodically update this
Disclosure in accordance with applicable legislation or
measures adopted by the Data Protection Authority
The aforementioned changes or additions will be brought to
knowledge of interested parties by email and by link
on the Privacy Policy page on the website.
Any interested party is in any case invited to take a look
with regularity of the Privacy Policy to verify the information

bottom of page