GENERAL INFORMATION

Hotel Croce di Malta S.R.L. (hereinafter also the company) has drawn up the present data protection statement in order to inform visitors to the www.crocemalta.com/en/ website about the terms and purposes of data processing. In particular, visitors and any person who makes use of the services offered on the websites, are informed, in accordance with Article 13 of Regulation (EU) 679/2016 on the protection of personal data (hereinafter, also “the Regulation”). The present data protection statement relates exclusively to the aforesaid website and does not apply to linked sites, which may be visited by the users of our website. The present privacy policy is an integral component of our website and of the services offered by us. To access the website and use the same, as well as to purchase the products offered on the website you are required to read and understand the present privacy policy. Should you not be in agreement with the present privacy policy, we would ask you not to use our website.
The company may amend or update the present privacy policy in whole or in part. Amendments and additions to the privacy policy may be viewed by all users in the privacy column of the website and are binding with effect from publication on the website. Should the user not be in agreement with the amendments, he may cease using our website. The continued use of our website and our products and services subsequent to publication of the aforementioned amendments and/or modifications shall be deemed acceptance of the amendments and acknowledgement of the binding nature of the new conditions. The website, www.crocemalta.com/en/, is the property of the company and is administered by the said company.

TYPES OF DATA COLLECTION AND PROCESSING PURPOSE

NAVIGATION DATA

In normal use, the systems and software processes required for correct performance of the website collect some personal data, the transmission of which is part of the normal use of Internet communication protocols. These data concern information, which is not collected in order to identify the subject, but which by virtue of their properties allow users to be identified through the processing and compilation of data transmitted by a third party. This category of data includes the IP addresses or the names of domains, the computer used by the users of the website, the URI (uniform resource identifier) of the resources requested, the time the enquiry was made, the method used to make the enquiry with the server, the size of the file received as response, the status data of the response given by the server (successful, error, etc.) as a numerical code and other parameters with respect to the operating system and the user’s computer environment. These data serve exclusively for statistical purposes and are administered solely in anonymous form, in order to ensure their correct function. The data may be also used to establish responsibility in the event of hypothetical breaches of IT law resulting in damage to the website. With the exception of this case, the aforementioned data shall not be stored for more than 24 months.

DATA SUPPLIED VOLUNTARILY BY THE USERS/VISITORS

Data, which are transmitted by the visitor to the website, voluntarily and expressly for the purpose of using specific services (e.g. contact form etc.) and to the Hotel Croce di Malta S.R.L. by means of e-mail enquiries, may be automatically registered, in which case the information is used exclusively for the services specified in the communication of the information. Your data are used for the purpose of responding to your specific queries, fulfilling contractual duties, tax or accounting duties, billing, debt collection and for compliance with the duties prescribed by the statutes in force.

COOKIES:

This website also collects personal data by means of the use of cookies. Further information on the Hotel Croce di Malta S.R.L. Cookie Policy can be found on the following link: www.crocemalta.com/en/cookie-policy/
With the exception of navigation data the Hotel Croce di Malta S.R.L. solely processes data, which has been submitted voluntarily and expressly by the user. If you refuse to transfer certain information, you may however find that you are restricted in the services offered. Once registered, the personal data collected will be used only for the services indicated in the information available. Visitors to the site can provide their data for:

• Newsletter
• Information on services or products, offers, enquiries etc.
• Participation in various initiatives
• Purchases or reservations of the products offered on the website
• Announcing the visitor’s interest in working with the company and/or responding to a job vacancy advertisement
• Contacting the company using the form provided for this purpose
• Enquiring about the availability of rooms for a specified period and a specific number of persons
• Book directly on the website

There follows a short list concerning the specific use of personal data on the website. In order to use the services the user may be required to supply some or all of the following data: forename, surname, age, street, post code, e-mail address, city, country, date of birth, telephone number, mobile number, fax, payment method, period of stay, number of guests (adults and children), forename and surname of additional guests. Please, note that other information may also be requested.

BOOKING

In this section, the user can enter a binding booking via the website. Acceptance of the privacy policy is deemed to be an essential pre-condition for requesting this service. The company confirms the priority notice by sending an e-mail to the address entered by the user.

CONTACT

The contact section allows the user via the appropriate form to send the company a personal message in order to obtain a reply from the same. The following personal data is required: name, email and other data that may be mentioned in the “Subject” and/or “Text of the Message” section. Acceptance of the Company’s Privacy Policy is an essential requirement for the use of the service in question.

PROCESSING OF PERSONAL DATA

Pursuant to art. 4 c.7 of the Regulations, the owner of the processing of personal data collected through this site is the Company with the right Hotel Croce di Malta S.R.L. registered at the number RM-1305196 at the register of companies in Rome. Registered office in Via Borgognona 28 – 00187 Rome (RM). VAT and F.C.: 11471081007 – Share Capital: € 10,000.00 f.p. Personal data may be processed within the limits and with the methods set out in this declaration by employees and collaborators of the Company designated as persons in charge of data processing, who will receive adequate operating instructions and will operate under the direct authority of the data controller. The controller is the current IT security manager domiciled at the Company. An up-to-date list of all the managers/persons in charge of the processing by the owner can be requested from the owner himself or the manager by writing to the following email address: info@crocemalta.com

DISCLOSURE TO THIRD PARTIES

In no circumstances are your personal data disclosed unless statutory provisions require that they be submitted to a judicial authority or other corporate bodies and institutes. In addition, the company uses the services of other companies and/or persons to perform specific services, such as sending e-mails, delivery of packages, the processing of payments. The aforementioned third parties have access only to those personal data, which are absolutely necessary for them to carry out their responsibilities. The company stresses that these third parties are forbidden from using the personal data for other purpose and are under a duty to use these data in conformity with the privacy policy and the statutory provisions currently in force. Hotel Croce di Malta S.R.L. does not intentionally collect personal data belonging to particular categories (Article 9 c.1 of the Regulation) or relating to criminal convictions and offenses (art.10 of the Reagulation) via its website. Should this be essential (for instance in the case of assignment to protected groups of persons in the case of sending a curriculum vitae for the purpose of sending a job application, in reply to a offer of employment or in expressing interest in employment in our firm) we request that the specific declaration be sent by post. In this declaration, please give your written permission for the treatment of data belonging to particular categories.

RETENTION OF THE DATA

Information and personal data, which is collected on this website, including that which the visitor voluntarily submits, in order to receive informational material or other messages, by writing to the addresses given in the Contact section, will be used only for the period absolutely necessary to perform the required service. Once the service has been performed, all personal data are deleted on the basis of the data protection guidelines of the Hotel Croce di Malta S.R.L., subject to conflicting governmental requirements or retention required by statute.

EXERCISE OF EXISTING RIGHTS

Privacy legislation (Articles 15-22 of the Regulation) guarantees Data Subjects the right to access data that concerns them at any time, as well as to request the correction and/or integration, if inexact or incomplete, deletion or limited processing of their data, if the conditions are met, to oppose processing for reasons relating to the situation of the Data Subject, to request the portability of the data provided, if processing is carried out by automated means and on the basis of consent or for the execution of a contract, to the extent envisaged by the Regulation (Article 20). For these purposes, the person concerned must contact the owner of the data processing system or the data security officer via the e-mail address: info@crocemalta.com

DATA SECURITY

Hotel Croce di Malta S.R.L protects personal data by means of internationally recognized security standards and by means of processes, which make

• unauthorized access
• unauthorized use and dissemination
• unauthorized modification
• loss and inadvertent or unlawful destruction impossible.

UNDER-AGE USERS

The site www.crocemalta.com/en/ is not intended for use by minors, who are not authorized to make purchases through the sites listed. We understand the importance of protecting information intended for minors, especially in an online environment, and therefore we do not collect or deliberately keep personal information about minors.