Privacy Policy

 

Welcome to the website of Hotel Veronesi La Torre.

 

This policy describes the personal data (hereinafter referred to as “Data”) that we collect when you use this website or use our services. Please read the following information carefully: it describes the Data we collect, the purposes of use and the rights you are entitled to as a Data Subject.

 

WHO IS THE DATA CONTROLLER? HAS A DATA PROTECTION OFFICER (DPO) BEEN APPOINTED?

The Data Controller is Calzedonia S.p.A. (hereinafter also referred to as “Calzedonia”), with registered office in via Portici Umberto Primo 5/3, Malcesine (VR), e-mail [email protected].

Calzedonia has appointed a Data Protection Officer who can be contacted by writing to [email protected].

 

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

 

Navigation on the website of Hotel Veronesi La Torre

Purpose: to allow web browsing; to carry out aggregate statistical analyses aimed at measuring the correct functioning of our site and, in the event of computer crimes, to ascertain any liability.

Data processed: IP addresses, domain names, URIs. This data is acquired by the computer systems responsible for the operation of our site.

Legal basis:

  • allow users to browse the Hotel Veronesi La Torre website;
  • legitimate interest consisting in ensuring the proper functioning of IT systems and in ascertaining possible offences (possibly also on the basis of the existence of a legal obligation).

Retention period: Data stored for a period not exceeding 30 days, except in the case of ascertainments of responsibility for computer crimes for which a legal obligation or a request from the Authority may require retention for a longer period.

 

Sending commercial communications

Purpose: To customers who request it through the appropriate online form, we will send commercial communication relating to offers and products of Hotel Veronesi La Torre.

Data processed: contact details requested in the online form.

Legal basis: your consent that you can revoke at any time by writing to [email protected].

Retention period: until you withdraw your consent. The data you provide to us for the purpose of receiving commercial communications will be stored until we receive a request from you to stop sending these communications.

 

Profiling

Purpose: To send personalized commercial communications based on your purchases and your interactions with us.

Data processed: contact data (e.g. first name, last name, email address, telephone number), data relating to your purchases and interactions with us.

Legal basis: your consent that you can revoke at any time by writing to [email protected]

Retention period: until you withdraw your consent. Information about your purchases and reservations will be retained for 3 years from the date of each purchase or reservation.

 

Purchase of products and booking/purchase of services

Purpose: Management of your booking request, processing of your purchase order, management of related activities (invoicing, payments, etc.).

Data processed: contact data (e.g. first name, last name, e-mail address, telephone number), payment data

Legal basis: The implementation of pre-contractual and contractual measures.

Retention period: Your personal data will be kept for the time strictly necessary to process your order or process your reservation for the service you have requested and subsequently for the time imposed by any legal obligations (e.g. in tax matters).

 

Gift Card

Purpose: We will process the name and e-mail address of the beneficiary of the Gift Card (i.e. the person who will receive it as a gift) to deliver the Gift Card and to ensure the use of the same.

Data processed: name and e-mail address

Legal basis:

  • Fulfill the Gift Card purchase contract.
  • Legitimate interest of the Data Controller to guarantee the delivery and use of the Gift Card to the beneficiary.

Retention period: The beneficiary’s data will be processed for the period strictly necessary for the delivery and use of the Gift Card.

 

Access to the services and courses of the Fitness & Pilates Area Wellness Center

Purpose: At our hotel there is a wellness center and fitness area, we will process your data to allow you to book and use our services.

Data processed: personal and contact data requested in the registration/booking form. To ensure safety in the performance of activities in the fitness area, we will process the data relating to your health contained in the medical certificate on the basis of your consent.

Legal basis:

  • Fulfilment of legal and contractual obligations related to the requested service
  • Consent

Retention period: The data will be processed for the time strictly necessary to fulfil pre-contractual and contractual obligations and the obligations imposed by law (e.g. tax matters). The medical certificate awarded will be kept for as long as you use the services of the Fitness Room & Pilates Area.

 

Customer Support

Purpose: Management of your requests for assistance and support relating to the services of the Hotel and the Fitness Area.

Data processed: Identification data (name, surname, email address, telephone number); data relating to your requests; any data relating to the booking or use of services (e.g. registration to the “Fitness” Area).

Legal basis:

  • Execution of the contract for the sale of products or pre-contractual measures adopted following your request;
  • Legitimate interest in defending our rights in court or out of court, in the event of legal claims or disputes resulting from the requests you submit to us;

Retention period: The data will be processed for the period necessary to manage your request and the following 10 years.

 

Video surveillance

Purpose: To ensure the safety of our building, staff and customers, we have a video surveillance system in place. The images are used to intervene in the event of actual emergencies (such as fires, theft, robberies, vandalism and unauthorised access) or for the purposes of defence, investigation and the enforcement of our claims and rights.

Data processed: your image

Legal basis: the Data Controller’s legitimate interest in protecting its business assets and ensuring the safety of its employees and customers

Retention period: The footage will be retained for a period of 72 hours. In the event of a request from the judicial authorities or the police, or, in any case, if the images are used in legal proceedings, the retention period may be extended until the proceedings are concluded.

 

TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

The Data collected for the purposes indicated in the previous paragraph may be communicated to:

  • staff of Calzedonia S.p.A., in charge of managing our website and the services available online and at the Hotel;
  • suppliers of Calzedonia S.p.A. (e.g. suppliers of IT services/products and platforms, consultants): these parties use your data as “data processors”, appointed by Calzedonia S.p.A., through the signing of a specific contract;
  • Credit institutions, insurance companies: these parties act as independent data controllers and their involvement is necessary to carry out necessary operations related to the use of our services (e.g. making payments; delivering the purchased goods).

 

COOKIE

We use cookies in some areas of the site. We ask you to read the Cookie Policy, which can be consulted together with this policy.

 

SOCIAL NETWORKS

In some areas of the site, it is possible to use the data from your social profile to automatically fill in some fields of our booking forms. In this case, we invite you to consult the terms of use and privacy policy of the social network.

 

DO WE TRANSFER YOUR PERSONAL DATA TO NON-EU COUNTRIES?

We may use providers whose servers may be located outside the European Union to provide our services. In this case, the transfer will be carried out subject to the stipulation of Standard Contractual Clauses adopted by the European Commission with decision 2021/914, i.e. subject to verification that the non-EU country to which the transfer will be carried out offers an adequate level of protection of personal data.

 

WHAT ARE THE RIGHTS YOU CAN EXERCISE AS A DATA SUBJECT?

You can exercise the rights that the law guarantees you regarding your personal data by writing to [email protected]. We undertake to respond to your request as soon as possible and in any case no later than 30 days from receiving your request. In some cases, we may ask you for additional information if we need to verify your identity in connection with your request. In particular, you can exercise the following rights:

 

  •  Access: You can find out whether we are processing your personal data, if so, obtain a copy of it and be informed about: origin, categories of data processed, recipients, purposes of processing, automated decision-making (including profiling), retention period and rights under the GDPR.
  • Rectification: You can get correction or integration of your data.
  • Erasure: You can request the deletion of personal data when it is no longer necessary for the purposes for which it was collected or when we are no longer authorized to process it.
  • Restriction of processing: You may request the restriction of processing in the following cases: i) you have contested the accuracy of the personal data and request a restriction for the period necessary to verify its accuracy; ii) we are no longer allowed to process the data, but you request that we restrict its use instead of deleting it; iii) the personal data in our possession, although no longer necessary for the purposes for which they were collected, are necessary for the establishment, exercise or defense of legal claims, iv) you have objected to processing based on our legitimate interest and you are waiting for your request to be handled
  • Data portability: You can receive personal data concerning you in a structured, commonly used and machine-readable format, and request that such data be transmitted to another controller.
  • Withdrawal of consent: You can withdraw consent for processing based on it.
  • Objection: You may object at any time to the processing of your personal data based on our legitimate interest.

 

Finally, we inform you that, if you believe that the processing of personal data concerning you is carried out in contrast with the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the competent supervisory authority on data protection.

We reserve the right to update the content of this page from time to time.

We therefore invite you to consult this policy regularly in order to stay up to date with any changes that have occurred since your last consultation.

 

Last updated: April 2026