Book now

PRIVACY POLICY

Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

Dear User, in compliance with current regulations regarding the protection of personal data, we would like to inform you about how Albergo Athena s.r.l. processes the personal data collected through this website.

1. DATA CONTROLLER

The Data Controller is: Albergo Athena s.r.l. Via Ercole Pasquali, 3 – 00161 Rome VAT number: 01576301004 Phone: +39 0644232217 Email: a.athena@tiscali.it

2. TYPE OF DATA COLLECTED, PURPOSE AND LEGAL BASIS

The website collects and processes the following types of personal data for the purposes and legal bases indicated below:

a) Contact Form (Form)

  • Data collected: Name, Email Address, Phone Number, content of the Message.
  • Purposes: To respond to requests for information or assistance submitted by the user.
  • Legal Basis: Performance of pre-contractual measures taken at the request of the data subject (Art. 6, para. 1, point b, GDPR).

b) Reservations (Smartness Widget)

  • Data collected: Date of stay, navigation data and click on redirections.
  • Purposes: Allow the user to select the dates and access the external booking system (Booking Engine provided by Smartness).
  • Note well: The site uses a date selection widget that redirects the user to the Smartness platform. Once on the Booking Engine, the booking data will be processed by Smartness and our property.
  • Legal Basis: Execution of pre-contractual measures (Art. 6, par. 1, letter b, GDPR).

c) Navigation and Hosting Data

  • Data collected: IP addresses, system logs, browser type, access times.
  • Purposes: To ensure the proper functioning of the site, the security of information and to prevent abuse. The site is hosted on the servers of Hostinger, Located in France (European Union).
  • Legal Basis: Legitimate interest of the Owner to ensure the security and functionality of the site (Art. 6, para. 1, letter f, GDPR).

3. THIRD-PARTY SERVICES AND DATA SHARE

The site, based on the WordPress CMS, integrates third-party services to improve the user experience. These services may collect traffic data or install cookies:

  • Google Fonts (Google Ireland Limited): Character style display service. To provide the fonts, Google may collect the user’s IP address. Legal basis: Legitimate interest / Consent (depending on the cookie banner settings).
  • Google Maps (Google Ireland Limited): Interactive map display service useful for showing the location of the property. Google may collect cookies and usage data. Legal basis: Consent (collected through banner cookies).
  • Complianz Plugin used for managing the Cookie Policy and collecting the user’s consent. Complianz does not process users’ personal data, but records the consent log in an anonymous manner in a local database to verify compliance with legal requirements.

Data transfers to services such as Google (which may process the data in the USA) are guaranteed by the European Commission’s Standard Contractual Clauses or by adherence to the Data Privacy Framework.

4. PLACE OF PROCESSING

The data are processed at the operational headquarters of the Data Controller (Rome, Italy) and at the data centers of the Web Hosting service provider (Hostinger), whose relevant servers for this site are located in France (within the European Economic Area – EEA), in total compliance with the security standards of the GDPR.

5. PERIOD OF DATA STORAGE

Personal data will be kept for the time strictly necessary to achieve the purposes for which they were collected:

  • The data from the contact form will be kept for the time necessary to process the request and subsequently deleted, unless a customer-hotel relationship is established (e.g. subsequent booking).
  • System and hosting logs are kept for a limited period, usually no longer than 6 months, unless there is a need to investigate computer crimes.

6. NATURE OF THE GRANT

Providing the data for the contact form is optional; however, failure to fill in the mandatory fields (Name, Email) will make it impossible to submit the request and receive a response. Accepting cookies for additional services (such as Google Maps) is optional and can be managed through the dedicated banner provided by Complianz.

7. RIGHTS OF THE INTERESTED PARTY

Pursuant to Articles 15 and following of the GDPR, the data subject has the right to request the Controller:

  • Access to their personal data;
  • The correction or the cancellation (right to be forgotten) of the same;
  • The restriction of the processing;
  • The’opposition to the treatment;
  • The portability of the data (if applicable).

In addition, if the processing is based on consent, the data subject may revoke it at any time via the cookie management form (Complianz) available on the website.

To exercise these rights, the user can send a written communication to the property’s physical address or an email to: a.athena@tiscali.it

If the data subject considers that the processing infringes the GDPR, they have the right to file a complaint. Complaint to the Data Protection Commissioner (www.garanteprivacy.it).