Privacy and cookie policy

Who are we and what do we do with your personal data?

Unihotel srl, as the Data Controller, safeguards the confidentiality of personal data and guarantees it the necessary protection from any event that could put it at risk of violation.

The Data Controller, therefore, adopts policies and practices in relation to the collection and use of personal data as well as the exercise of your rights according to applicable regulations. The policies and practices adopted will be subject to updating when necessary as a result of both regulatory and organisational/company changes, where these affect the processing of your personal data.

For all matters concerning the processing of your personal data, you can contact the Data Controller at: info@b21-group.com

How do we collect and process your data?

The Data Controller collects and/or receives your personal identification data, such as your name, surname, e-mail address, telephone number, etc., which are provided while you are browsing the site www.b21hotel.it by directly filling in online forms to request information on the activities carried out by Unihotel srl or through contact request and online booking forms. This data is necessary for the Controller to follow up on your requests and may be communicated to third parties that have contractual relations with the Controller or associated companies and/or business partners with reference to external collaborators and in general to all subjects to whom the communication of said data is necessary for the punctual, exhaustive and complete fulfilment of your requests.

The Data Controller also collects and/or receives information about you relating to your IP address and cookies issued by browsing the site www.b21hotel.it. This data is used to manage the site itself and to collect information of an aggregate nature. These data are communicated mainly to third parties and/or recipients whose activities are necessary to carry out the activities related to the above-mentioned purposes as well as to comply with any legal obligations.

Your personal data will therefore in no way be disseminated or disclosed to unspecified parties.

What are cookies and what are they used for?

A ‘cookie’ is a small text file created by some websites on the user’s computer when the user accesses a particular site, for the purpose of storing and transporting information. Cookies are sent by a web server (which is the computer on which the website visited is running) to the user’s browser (Internet explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the user’s computer; they are then re-sent to the website on subsequent visits. Some operations could not be carried out without the use of cookies, which, in some cases, are technically necessary. In other cases, the site uses cookies to facilitate and facilitate navigation by the user or to enable the user to take advantage of specifically requested services.

Cookies may remain in the system for long periods of time and may also contain a unique identification code. This allows the sites that use them to keep track of the user’s navigation within the site itself, for statistical or advertising purposes, i.e. to create a personalised profile of the user based on the pages he or she has visited and to show and/or send him or her targeted advertising (so-called Behavioural Advertising).

What cookies are used and for what main purposes?

This website www.b21hotel.it uses a number of technical but non-profiling cookies.

By disabling cookies some of our services may not function properly and some pages will not display properly. There are different types of cookies, some to make the use of the Site more effective, others to enable certain functionalities; the cookies used allow us to store the preferences you have entered, to avoid you having to re-enter information several times during your visit such as your username and password, to analyse the use of the services and content provided and to optimise your browsing experience and the services offered.

Third-party cookies

Third party cookies, i.e. cookies created by a website other than the one the user is currently visiting, are also operational on this website. The Data Controller is obliged to provide the updated link to the notices and consent forms of the third parties with whom special agreements have been made for the installation of cookies through their website.

In particular, users are informed that the website uses the following services that issue cookies:

The web analysis service ‘Google Analytics’ provided by Google, Inc. Google Analytics is a web analytics service that uses “cookies” that are placed on your computer to help the website you visit analyse how users use it. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In order to consult Google’s privacy policy regarding the Google Analytics service, as well as to express your consent to the use of the aforementioned cookies, please go to https://www.google.com/intl/en(analytics/ privacyoverview.htmal and click on the following link: Privacy Policy. If you wish to deactivate these cookies, you will need to opt out.

Social Buttons

On the www.b21hotel.it website there are special ‘buttons’ (called ‘social buttons/widgets’) depicting the icons of social networks (e.g. Facebook). These buttons allow users who are browsing the sites to interact with a ‘click’ directly with the social networks depicted therein. In this case, the social network acquires data relating to the user’s visit, while the owner will not share any browsing information or user data acquired through its site with such social networks accessible via social buttons.

Deselection and activation of cookies

By accessing the site and passing the initial banner containing the brief information, the user has given his or her express consent to the use of the third-party cookies indicated above.

The selection/deselection of cookies can be done freely through your browser (menu Settings, Internet Options, Privacy and opting for the desired cookie blocking level). For further information please refer to : Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Exlporer.

It is also possible to activate the Do Not Track option present in most of the latest generation of browsers.

Third-party cookies can be disabled by contacting the third party’s Privacy Policy directly. Disabling third party cookies does not affect navigability in any way.

Secondary purposes

Communication to third parties and recipients

Your personal data is processed in accordance with the contract and the obligations, including legal and/or regulatory obligations, arising therefrom. Your data will therefore not be communicated to third parties for their own purposes unless: a) you give your consent b) it is necessary for any obligations arising from the contract and/or from the law.

The personal data that the Controller processes for this purpose are, among others: IP address and cookies.

Computer security

The Data Controller processes, including through its suppliers (third parties and/or recipients) your personal computer or traffic data or obtained to the extent strictly necessary and proportionate to ensure the security and ability of a network or the servers connected to it to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted.

For these purposes, the Data Controller provides procedures for handling personal data breaches.

What happens if you do not provide your data?

The personal data that concerns and identifies you are necessary for the fulfilment of the requests submitted by you through the Contact Us section or through other forms on the site – such as online booking, if not provided they make it impossible for the Controller to fulfil your requests.

With regard to the matter of cookies, please refer to what has been said above about the deselection of individual cookies and their consequences.

How, where and for how long is your data stored?

Data processing is carried out through computerised procedures by specially authorised and trained internal persons. They are granted access to your data to the extent and within the limits necessary for the performance of the processing activities concerning you. Your data is processed separately from other data, including by means of pseudonymisation or aggregation methods that do not allow you to be easily identified.

The Data Controller periodically checks the instruments by means of which your data are processed and the security measures envisaged for them, which are also constantly updated; it verifies, also through the persons authorised to process the data, that no personal data are collected, processed, filed or stored that do not need to be processed; it verifies that the data are stored with a guarantee of integrity and authenticity and that they are used for the purposes of the processing actually carried out.

The data are stored in computer and telematic archives located within the European Economic Area.

The data are kept for the time necessary to fulfil the information and communication requests that the Data Controller makes in response to your request and in any case for a period not exceeding a maximum of ten years, except in cases where events occur that require the intervention of the competent Authorities, also in cooperation with third parties/recipients entrusted with the Data Controller’s data security activities, to carry out any investigations on the causes that led to the event. As far as data from Internet traffic and cookies are concerned, please refer to the storage terms already mentioned above.

What are your rights?

• Your rights under the new legislation ex EU Regulation 2016/679 allow you to have continuous control of your data through the rights of:
• Access;
• Rectification,
• Cancellation;
• Limitation of processing;
• Opposition to processing;
• You may then, at any time and free of charge
• Obtain confirmation of the processing carried out by the Controller;
• Access your personal data and know their origin (when the data are not obtained from you directly), the purposes and aims of the Processing, the data of the persons to whom they are communicated, the retention period of your data or the criteria used to determine it
• Update or rectify your personal data so that they are always exact and accurate;
• Delete your personal data from the Data Controller’s databases and/or archives, including backup archives, in the event, among others, that they are no longer necessary for the purposes of the processing or if the processing is assumed to be unlawful, and provided that the conditions provided for by law are met; and in any case if the processing is not justified by another, equally legitimate reason;

• Limit the processing of your personal data in certain circumstances, for example where you have contested its accuracy, for the period necessary for the Controller to verify its accuracy. You must also be informed, in an appropriate timeframe, when the period of suspension has expired or the cause for the restriction of processing has ceased to exist, and thus the restriction itself lifted;
• Obtain your personal data, if received or processed by the Controller with your consent and/or if they are processed on the basis of a contract and by automated means, in electronic format also for the purpose of transmitting them to another Data Controller.

The Controller shall do so without delay and at the latest within one month of receipt of your request. The deadline may be extended by two months if necessary, taking into account the complexity and number of requests received by the Controller, and if necessary informing you of the reasons for the extension.

For any further information and requests, please contact the Controller at info@b21-group.com

How and when can you object to the processing of your personal data?

For reasons relating to your particular situation, you may object at any time to the processing of your personal data if it is based on a legitimate interest, by sending your request to the Controller at info@b21-group.com

You are entitled to the deletion of your personal data if there is no legitimate reason overriding the one that gave rise to your request.

To whom can you complain?

Without prejudice to any other administrative or judicial action, you may lodge a complaint with the competent supervisory authority or with the authority which carries out its duties and exercises its powers in Italy where you have your habitual residence or work or if different in the Member State where the breach of EU Regulation 2016/679 occurred.

Any updates to this notice will be communicated to you in a timely manner by appropriate means and you will also be notified if the data controller processes your data for purposes other than those set out in this notice before doing so and in time to give your consent if required.