Privacy

1. Data Controller

ALFIERI SRL
CF: 02904410178 – P.IVA: 00703760983
Viale Francesco Agello 114/A, 25015 Desenzano del Garda, Italia
Tel: +39 030 553999 – Email: info@palacehoteldesenzano.it


2. Types of Data Processed

Browsing data (e.g., IP addresses, technical logs, device identifiers, session data, user agent), collected automatically by the website for security and operational purposes. Data provided voluntarily (e.g., first name, last name, email, phone number, message content) via contact forms or information/reservation requests.
Contractual data (e.g., billing information, reservation details) when you proceed with requests, quotes, or services.
Cookies and similar technologies. For more details, please see our Cookie Policy


3. Purposes and Legal Bases

Website operation and security (logs, abuse prevention) – legitimate interest of the Data Controller (Art. 6.1.f GDPR). Management of requests submitted via forms/email and related communications – pre-contractual measures or performance of a contract (Art. 6.1.b).
Management of reservations/services, administrative and accounting obligations – performance of a contract (Art. 6.1.b) and legal obligation (Art. 6.1.c).Direct marketing via email/phone (only if requested or permitted) – consent (Art. 6.1.a) or legitimate interest for customers within the limits of the law.
Legal defense – legitimate interest (Art. 6.1.f).


4. Disclosure of Data

Providing the data marked as required in the forms is necessary to process the request or provide the service.
Failure to provide this data may prevent the request from being processed. Data collected for optional purposes (e.g., marketing) is subject to consent.


5. Methods of data processing

Data processing is carried out using computerized and/or analog tools, with technical and organizational measures appropriate for data security, in accordance with the principles of lawfulness, fairness, and transparency (Art. 5 of the GDPR). No fully automated decision-making processes that produce legal effects on the data subject are carried out, unless otherwise specified in the Cookie Policy.


6. Data storage

Contact information: for the time necessary to respond and up to 24 months from the last relevant contact.Contractual/billing data: for the periods required by civil and tax laws (typically 10 years).Marketing: until consent is revoked or an objection is raised, and in any case within the limits established by law.Technical logs: as required for security and maintenance purposes (typically 6–24 months).


7. Addressees of the Data

The data may be disclosed to parties acting as Data Processors pursuant to Article 28 of the GDPR (e.g., hosting providers, IT maintenance providers, booking engines, CRM/email providers, and administrative and accounting consultants), as well as to parties authorized by law and competent authorities. An updated list of Data Processors is available upon request.


8. Transfers to Non-EU Countries

Some service providers may operate in countries outside the EU. In such cases, the transfer will be carried out in accordance with Chapter V of the GDPR, based on adequacy decisions by the European Commission, Standard Contractual Clauses, or other appropriate safeguards. A copy of these safeguards may be requested from the Data Controller.


9. Rights of Data Subjects

You may exercise the rights set forth in Articles 15–22 of the GDPR at any time, including: the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent (without affecting the lawfulness of processing based on consent prior to its withdrawal).
Requests should be sent to info@palacehoteldesenzano.it or to the mailing address indicated in section 1.


10. Filing a Complaint with the Authority

You have the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority in the Member State where you reside or work.


11. External Links

This site may contain links to third-party websites or services. The privacy and cookie policies for these sites are the sole responsibility of the third parties.
We encourage you to review them on the respective websites.


12. Changes

The Data Controller reserves the right to modify this policy to comply with new regulatory or technical requirements.
Any changes will be posted on this page, along with the date of the update.


Brief Privacy Notice for Online Forms

By filling out and submitting the forms on this website, you declare that you have read this privacy notice and consent to the processing of your personal data for the purpose of handling your request (Art. 6.1.b of the GDPR). For marketing purposes, where applicable, specific and separate consent is required.