Hotel Villa Augusta Grado

Privacy & Cookie Law Policy​​

Information notice pursuant to article 13 of Italian Legislative Decree no. 196/2003, provided to those visiting the website and using the services offered by the website, excluding external links.

In accordance with EU Regulation no. 2016/679, known as the “GDPR” (General Data Protection Regulation), please be informed that we shall process the personal data regarding you and that you have provided to us or will provide to us. Personal data will be processed in compliance with applicable legislation and under the following terms and conditions.

1. Data controller

Viale Argine dei Moreri, 11
34073 GRADO (Go)
P.Iva. 01253660318

Guarantees compliance with personal data protection regulations, providing the following information on the processing of data disclosed or, in any case, collected as part of navigating this website.

2. Data processed, purposes of processing and legal basis for processing

Data generated by accessing the website
As part of their standard operations, the IT systems and software procedures used to run this website acquire certain pieces of personal data, which must be transmitted in order to use internet communication protocols.

This data (e.g. domain names, IP addresses, operating system used, the type of browser device used to connect) is not accompanied by any additional personal information and is used for: i) gathering anonymous statistical information on the use of the website; ii) managing requirements to check how the website is used; iii) establishing responsibility in the case of potential computer crimes.

The legal basis that justifies the processing of said data is the need to make sure that the website functions can be used when accessed by the user.

Data provided voluntarily by the user 
The personal data provided by the user through the forms provided is collected and processed for the following purposes:

  1. to carry out relationship activities with the customer based on contractual agreements;
  2. for administrative purposes and to fulfil legal obligations, such as accounting and tax activities, or to reply to a request from the judicial authorities;
  3. with specific consent to do so, to regularly send newsletters and advertising and promotional material via e-mail;
  4. if specific consent is given, to receive updates on our activities and alerts when a post is published on our blog.

The legal basis that justifies processing is the performance of a contract entered into by the data subject or the carrying out of pre-contractual measures adopted following the request of the data subject. When expressly stated, the legal basis is the consent freely provided by the data subject.

3. Nature of data provision

With the exception of the indications for navigation data and any data collected, data provision:

  • for the purposes referred to by letters a) and b) is optional, although refusing to do so may make it impossible to fulfil the contractual obligations undertaken.
  • for the purposes referred to by letters c) and d) is also optional, and the use of said data is subject to you providing explicit consent. Any refusal to provide your data shall make it impossible for us to send our newsletters, advertising and promotional material, invitations to events and initiatives.

4. Processing methods and period for which data will be stored

Data collected shall be processed using electronic or, in any case, automated, computerised and telematic means, or will be processed by hand using logic that is strictly linked to the purposes for which said personal data has been collected and, in any case, in order to guarantee its security under all circumstances.

Data will be stored for the amount of time that is strictly necessary for the purposes for which said data has been collected, in compliance with applicable regulations and legal obligations. Data will be stored in our archives for a maximum of 10 years and data collected will not be disclosed to third parties or transferred to foreign countries.

In any case, the Data Controller shall impose rules that prevent the data from being stored indefinitely and shall therefore limit the amount of time for which data is stored in accordance with the principle of keeping data processing to a minimum.

5. Rights of the Data Subject

You may access your data at any time, object to processing or ask for personal data collected by the website’s data controller to be cancelled, modified or updated, exercising the right to restrict processing and the right to data portability by sending an e-mail to our address.

Pursuant to Art.7 of Italian Legislative Decree no. 196/03 – Art. 7 – Right to access personal data and other rights.

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form;
2. The data subject has the right to obtain indication:

a. of the origin of the personal data;
b. of the purposes and methods of processing;
c. of the logic applied in the event of processing carried out using electronic tools;
d. of the identification details of the data controller, data processors and the designated representative pursuant to Article 5, paragraph 2;
e. of the entities or categories of entity to whom or which the personal data may bedisclosed and who or which may become aware of said data in their capacity as designatedrepresentative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

3. The data subject has the right to obtain:

a. updating, rectification or, where interested therein, integration of the data;
b. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c.certification to the effect that the operations as per letters a) and b) have beennotified, as also related to their contents, to the entities to whom or which the data weredisclosed or disseminated, unless this requirement proves impossible or involves a manifestlydisproportionate effort compared with the right that is to be protected.

4. The data subject has the right to object, either fully or in part:

a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising material or direct selling or for the performance of market or commercial communication surveys.


Amendments to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, notifying Users of such amendments on this page and, if possible, as well as by sending notification to the Users using one of the contact details available to the Data controller, should this be technically and legally feasible. We therefore kindly ask that you regularly check this page, referring to the date when it was last updated, as indicated at the bottom.

Should these changes refer to data processing for which consent is required, the Data controller shall collect the User’s consent again, if necessary.