Privacy Policy

Dear User,
On this page, you will find information on how we manage your personal data through our website.
We provide this information not only to comply with the legal obligations regarding the protection of personal data set forth in the Regulation (EU) 2016/679 GDPR or "Regulation", and the national legislation Legislative Decree No. 196 of June 2003 of the Personal Data Protection Code, but also because we believe that the protection of personal data is a fundamental value of our business, and we want to provide you with all the information that can help you protect your privacy and control the use of your data in relation to your browsing experience on our website.

Data Controller and Data Protection Officer

The Data Controller, i.e., the person responsible for decisions regarding the methods and purposes of data processing, is:

Hotel Tivoli
Indirizzo Sede Legale: Via Nazionale Tiburtina • 340 00019 • Tivoli Terme • (Roma)
Telefono: (+39) 348 8608240
E-mail: hoteltivoli@hoteltivoli.info
P.Iva: 01435741002

The Data Protection Officer is:
FINCRES SPA

Information on the processing of personal data

When you visit, consult, or use the services available on this site, we may process the following personal data (i.e., data relating to identified or identifiable persons). For each type of data, you will find information on the purpose of the processing, whether it is mandatory or not, the methods and location of processing, the legal basis for the processing, as well as the entities to whom the data may be disclosed and the relevant retention period.

Name, surname, username

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Account registration Provision of the service you requested (e.g., registration for webinars, newsletters, quotes) Together with any contact information you may provide (see below) and with your consent, sending promotional messages about the products and services of Hotel Tivoli and, possibly, other group companies. With your consent, together with the additional information listed below, profiling and experience analysis activities Browsing for marketing and promotional purposes	Mandatory for account creation Mandatory for the performance of the requested service Unless the data is required for other purposes, providing data for sending promotional messages about Hotel Tivoli products and services and, possibly, other group companies or for profiling activities is optional and may be omitted.	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	With regard to the purposes related to account management and the performance of the requested service, your data is processed based on the need to fulfill your request. With regard to the purposes of sending promotional messages and/or profiling, the data is processed only with your specific consent.	The data may be communicated to other companies, acting as data processors, for the technical management of the account and the website. Furthermore, in the event of consent to data processing for marketing purposes, and any profiling, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, acting as data processors, for purposes related to To manage and send newsletters and commercial information via email, direct sales, market research, or other promotional activities, and for profile analysis.	For the period strictly necessary to achieve the purposes for which they were collected (i.e., for the duration of the relationship with the customer, and for retention for legal, tax, and accounting purposes). In the event of data processing for marketing and/or profiling purposes, the data is retained until consent is revoked, or for the maximum terms permitted by law.

Billing information and payment details

Purpose of processing

Mandatory or optional provision of data

Method and location of processing

Legal basis for data processing

Data recipients

Data retention period

Tax and accounting management of transactions
Provision of the service you subscribed to (e.g., webinar registration)
Third-party payment providers have access only to limited information regarding this data

Mandatory for completing the purchase and providing the requested service/product

Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

Your data is processed solely to fulfill the purchase agreement.

The data may be disclosed to other companies, who act as data processors, for the technical management of the account and the website.
Furthermore, the data may be disclosed to third parties (e.g., marketing agencies or other companies) for purposes related to the management and sending of newsletters and commercial information via email, direct sales, market research, or other promotional activities.

For the period strictly necessary to finalize the transaction and for retention for civil, tax, and accounting purposes.

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Account registration Provision of the service you requested (e.g., registration for events, webinars, newsletters, quotes) Sending information and other activities necessary for the conclusion or performance of contracts to which the data subject is a party Sending newsletters if you register for the relevant service With your consent, sending commercial information, including via email, to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general With your consent, profiling and browsing experience analysis for marketing and promotional purposes	Required for account creation and the management and processing of your requests Optional for sending promotional messages about Hotel Tivoli products and services and, possibly, other group companies	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed primarily using automated tools. Specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.	For purposes related to account management, your data is processed based on the need to fulfill your request. For purposes related to sending promotional messages, your data is processed only with your specific consent.	The data may be disclosed to other companies, acting as data processors, for the technical management of the account and the website. Furthermore, if you consent to data processing for marketing purposes, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, acting as data processors for purposes related to the management and sending of newsletters and commercial information via email, direct sales, market research, or other promotional activities.	For the period strictly necessary to achieve the purposes for which they were collected. If data is processed for marketing purposes, the data is retained until consent is revoked or for the maximum period permitted by law.

Telephone Number

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Management of the request sent by the user Provision of the service you requested (e.g., registration for events, webinars, newsletters, quotes) Allow account verification Help with account recovery (if applicable) With your consent, sending commercial information via operator, messaging services, SMS, etc., to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general	Mandatory for managing and fulfilling your request Optional for sending promotional messages about Hotel Tivoli products and services and, possibly, other Group companies	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	With regard to the purposes related to account management, your data is processed based on the need to fulfill your request. With regard to the purposes of sending promotional messages, the data is processed only with your specific consent.	The data may be communicated to other companies, acting as data processors, for the technical management of the account and the website. Furthermore, if you consent to data processing for marketing purposes, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, acting as data processors for purposes related to the management and sending of newsletters and commercial information via email, direct sales, market research, or other Promotional activities.	For the period strictly necessary to achieve the purposes for which they were collected. If data is processed for marketing purposes, the data is retained until consent is revoked or for the maximum period permitted by law.

Postal addresses

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Management of information/contact requests Provision of the service you requested (e.g., registration for events, webinars, newsletters, quotes) With your consent, sending commercial information to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general	Mandatory for managing and fulfilling your request Optional for sending promotional messages about Hotel Tivoli products and services and, possibly, other Group companies	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	With regard to the purposes related to account management, your data is processed based on the need to fulfill your request. With regard to the purposes of sending promotional messages, the data is processed only with your specific consent.	The data may be disclosed to other companies, acting as data processors, for the technical management of the account and the website. Furthermore, if you consent to data processing for marketing purposes, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, acting as data processors for purposes related to the management and sending of newsletters and commercial information via email, direct sales, market research, or other Promotional activities.	For the period strictly necessary to achieve the purposes for which they were collected. If data is processed for marketing purposes, the data is retained until consent is revoked, or for the maximum period permitted by law.

IP address and browsing data

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Website navigation Installation of technical/session cookies to improve the functionality of the site With your consent, sending commercial information, including via email, to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general With your consent, profiling and analysis of your browsing experience for marketing and promotional purposes	Required to visit the site and access its various features Optional for profiling activities and/or sending promotional messages about Hotel Tivoli products and services and, possibly, other Group companies	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed primarily using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	Your data is processed to provide you with the tools needed to visit the site and access the features available. Regarding the purposes of sending promotional messages, the data is processed only if you have given your specific consent.	The data may be disclosed to other companies, who act as data processors, for the technical management of the account and the site. Furthermore, if you consent to the processing of data for marketing purposes, and any profiling, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, as data processors, for purposes related to the management and sending of newsletters and commercial information via email. Direct sales, market research, or other promotional or profiling activities.	For the duration of the session and the entire duration of use of the site. In the event of data processing for marketing and/or profiling purposes, the data is retained until consent is revoked, or for the maximum terms permitted by law.

Data relating to licensed products and/or subscribed services and transactions carried out in the Store, data relating to the request

Purpose of processing	Mandatory or optional provision of data	Method and place of processing	Legal basis for data processing	Data recipients	Data retention period
Management of assistance and information/contact requests With your consent, sending commercial information to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general With your consent, profiling and analysis of customer needs and purchasing habits, and how they use our services to anticipate customer needs and adapt our products and services to them	Mandatory for managing your request Optional for profiling and/or sending promotional messages about Hotel Tivoli products and services and, possibly, other Group companies	The processing related to the web services of this site takes place at the Data Controller's headquarters. Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	With regard to the purposes related to account management, your data is processed based on the need to fulfill your request. With regard to the purposes of sending promotional messages and/or profiling, the data is processed only with your specific consent.	The data may be disclosed to other companies, acting as data processors, for the technical management of the account and the website. Furthermore, if you consent to data processing for marketing purposes, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, acting as data processors for purposes related to the management and sending of newsletters and commercial information via email, direct sales, Market research or other promotional activities.	For the period strictly necessary to achieve the purposes for which they were collected. In the event of data processing for marketing purposes, the data is retained until consent is revoked, or for the maximum terms permitted by law.

Content of requests sent via the contact form (e.g., VAT number, any qualifications as a reseller or customer)

Purpose of processing	Mandatory or optional provision of data	Method and place of processing	Legal basis for data processing	Data recipients	Data retention period
Request management With your consent, sending commercial information to propose our products or services, to conduct customer satisfaction surveys, market research, and promotional activities in general With your consent, profiling activities for marketing and promotional purposes	Mandatory for managing your request Optional for sending promotional messages about the products and services of Hotel Tivoli and, possibly, other group companies and for profiling activities	The processing related to this site's web services takes place at the Data Controller's headquarters. Personal data is processed mainly using automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.	Your data is processed based on the need to fulfill your request. Regarding the purposes of sending promotional messages and/or profiling, the data is processed only if you have given your specific consent.	The data may be disclosed to other companies, who act as data processors, for the technical management of the account and the website. Furthermore, if you consent to the processing of data for marketing purposes, and any profiling, the data may also be processed by marketing agencies, market research agencies, or other Hotel Tivoli companies, as data processors for purposes related to the management and sending of newsletters and commercial information via email, direct sales, market research, or other promotional activities or profiling activities.	For the period strictly necessary to achieve the purposes for which they were collected. In the case of data processing for marketing purposes, the data is retained until consent is revoked, or for the maximum terms permitted by law.

Personal data contained in the CV (contact details, work experience, etc.)
NOTE: Please do not include sensitive data in the CV.

Purpose of processing	Mandatory or optional provision of data	Method and location of processing	Legal basis for data processing	Data recipients	Data retention period
Management of applications received and personnel selection	Mandatory for the evaluation of applications by Hotel Tivoli	The processing related to the web services of this site takes place at the Data Controller's headquarters. Personal data is processed primarily using automated tools. Specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.	Your data is processed based on the need to evaluate your CV based on your request expressed when submitting it.	The data may be disclosed to third parties (e.g., recruitment agencies) for purposes strictly related to managing your application.	For the period strictly necessary to achieve the purposes for which it was collected, i.e., for the period necessary to evaluate the application submitted. In any case, CVs received are deleted every 12 months.

You can find further information regarding the processing of your personal data (for example, in relation to the purchase/subscription of products or services) in the notices available in other sections of the site and appropriately highlighted.

Rights of Data Subjects

You can access your data at any time and free of charge, receive your electronic personal data in a structured, commonly used, machine-readable format, and ask us to transmit it to another data controller (data portability), as well as have it corrected, updated, amended, or deleted (subject to any applicable exceptions). Please note that requests for data deletion are subject to applicable legal and document retention obligations imposed on us by law or regulations.

Where the processing of your data is based on consent, you have the right to withdraw your consent at any time. Therefore, you always have the right to object to the sending of newsletters and the processing of your data for all or some of the marketing or commercial purposes. You can also update the information you provide to Hotel Tivoli by sending an email to hoteltivoli@hoteltivoli.info, or by post to Hotel Tivoli, Via Nazionale Tiburtina 340 00019 • Tivoli Terme • (Rome)

When contacting us, please be sure to include your name, email address, postal address, and/or telephone number(s) to ensure we can properly handle your request.

If you believe there is a problem with how we are handling your personal data, you have the right to lodge a complaint with your national data protection authority or with the data protection authority of any other EU or EEA country.