Privacy Policy
Published on 07/10/2026
This document describes the processing of personal data of users (hereinafter referred to as "Data Subjects") in the context of the use of this/these website/s or app/s (https://www.hotelsplendidcampiglio.it), in accordance with the provisions of Article 13 of Regulation (EU) No 2016/679 (hereinafter referred to as "Regulation") and the relevant legal provisions. The data will be processed following the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality. What is described in this document does not include cookies and other navigation tracking tools, for which please refer to the cookie policy.
Data Controller
The Data Controller is Tonelli Hotels, with its registered office at Via Dolomiti di Brenta, Madonna di Campiglio (TN) - 38086, Tax ID/VAT IT01177700224 (hereinafter referred to as "Data Controller" or "Controller"). Data Subjects may contact the Data Controller or the Data Protection Officer (hereinafter referred to as DPO), if appointed, at the contact details provided in the "Contacts" section.
Purposes of Processing, Legal Basis, Nature of Provision, Consequences of Non-Provision, and Retention Period of Personal Data
The Controller processes the data provided by the Data Subjects for the purposes listed below.
| Purposes of Processing | Live chat |
| Description | The processing is necessary to access the live chat with our operators |
| Legal Basis | Performance of a contract or pre-contractual measures requested by the data subject (art. 6 par. 1 lett. b) |
| Nature of Provision | Providing the data is necessary to fulfill a contractual obligation. |
| Consequences of Missing Consent | Failure to provide the data may result in total or partial inability to respond to the submitted request. |
| Retention Period | 1 year |
| Purposes of Processing | Availability request |
| Description | The processing of data is necessary to respond to the availability request for the indicated dates. |
| Legal Basis | Performance of a contract or pre-contractual measures requested by the data subject (art. 6 par. 1 lett. b) |
| Nature of Provision | Providing the data is necessary to fulfill a contractual obligation. |
| Consequences of Missing Consent | Failure to provide the data may result in total or partial inability to respond to the submitted request. |
| Retention Period | 1 year |
| Purposes of Processing | Download free material |
| Description | The processing is necessary to complete the download of the requested material. |
| Legal Basis | Consent of the data subject (art. 6 par. 1 lett. a) |
| Nature of Provision | The provision of data is optional |
| Consequences of Missing Consent | Failure to provide the data will result in the inability to download the requested material. |
| Retention Period | 6 months |
| Purposes of Processing | Geolocation and user position |
| Description | Authorization is necessary to allow the site to locate your position. |
| Legal Basis | Consent of the data subject (art. 6 par. 1 lett. a) |
| Nature of Provision | Authorization is optional; failure to grant authorization will result in the inability to track the user's position. |
| Consequences of Missing Consent | N.A. |
| Retention Period | Until the withdrawal of consent. |
Processing Methods
The processing is carried out through manual and/or automated methods, including the use of IT and telematic technologies (e.g., CRM, management software, and mailing list services), after applying appropriate technical and organizational security measures to ensure the safety, integrity, and confidentiality of personal data, thereby minimizing the risks of destruction, loss, unauthorized access, modification, and unauthorized disclosure.
Any profiling via cookies is carried out only with the user's specific consent: more information is available in the cookie policy and/or the informational banner upon first access. User profiling carried out with tools other than cookies is described in the paragraph referring to the purposes of processing, where applicable.
Transfer of Personal Data outside the EU/EEA
The Data Controller intends to transfer the data subjects' personal data to a third country or an international organization. Specifically:
- Standard contractual clauses have been signed
Vendors
| Vendor name | Description | Vendor Privacy Policy |
|---|---|---|
| Avacy CMP | Avacy CMP is the consent management platform by Weave Srl that displays the cookie banner on this site. It stores the visitor's consent choices in a first-party technical cookie so they are applied on later visits, and may keep a record of the consent given as proof of compliance. | https://jumpgroup.it/privacy-policy/ |
| Google Analytics | Google Analytics measures visitor behavior and engagement (pages viewed, session duration, traffic sources) via a cookie-based identifier, collecting device/browser data and an approximate location from the IP address. | https://policies.google.com/privacy |
| WPML | WPML is a WordPress multilingual plugin. It stores the current language in a cookie to display the site in the visitor's chosen language. | |
| Crazy Egg | Crazy Egg is a website analytics tool offering heatmaps and session recordings. It uses cookies to track clicks, scrolling and visitor sessions to show how users interact with pages. | https://www.crazyegg.com/privacy |
| iubenda Cookie Solution | The iubenda Cookie Solution is a consent management tool. It stores the visitor's consent choices in a cookie so they are remembered and applied on later visits. | https://www.iubenda.com/privacy-policy/65675001 |
| PixelYourSite | PixelYourSite is a WordPress plugin that manages tracking pixels such as Meta and Google. It stores UTM campaign parameters and order data in cookies to pass them to the connected advertising platforms. | |
| The Meta Pixel tracks visitor activity (page views, clicks, purchases) via cookies to measure and optimize Facebook/Instagram ad campaigns, matching data to the visitor's Meta account where possible. | https://www.facebook.com/policy/cookies | |
| PHP | PHP is a server-side programming language. Its standard session cookie (PHPSESSID) identifies the visitor's session so the site can keep state between page requests. | |
| AddThis | AddThis provides social sharing buttons and related tools. It sets cookies and identifiers to count shares, remember the visitor's sharing activity and collect browsing data used for audience analysis and interest-based advertising. | https://www.oracle.com/legal/privacy/addthis-privacy-policy.html |
| Google Advertising Products | https://business.safety.google/privacy/ |
Data Subject Rights
At any time, the Data Subject may access their information and request its rectification, deletion, or integration, restriction of processing, or object to its processing where there are legitimate reasons, as well as data portability to another Data Controller (where applicable). They may also object in whole or in part to the processing and have the right not to be subject to automated decision-making processes concerning natural persons, including profiling. To exercise the rights set out in Articles 15-22 of the GDPR, the Data Subject may contact the Data Controller using the contact details provided in the "Contacts" section. The Data Controller is obliged to respond to the request within 1 month or communicate any delay in response in case of numerous and/or complex requests (the extension cannot exceed 2 months). In any case, the Data Subject always has the right to file a complaint with the competent Supervisory Authority (Data Protection Authority) if they believe that the processing of their personal data is contrary to the current legislation.
Contacts
To exercise the rights provided by the law and for more information about the processing of personal data, you can contact the Data Controller at their office or by email at: info@hotelsplendidcampiglio.it. The Data Subject can also contact the Data Protection Officer by writing to: info@hotelsplendidcampiglio.it.
