Privacy Policy Offer

Information notice pursuant to Article 13 of Regulation 2016/679 (EU) VOIhotels S.p.A.Data controller and purposes of the processing

We inform you that VOIhotels S.p.A. is part of Alpitour Group.

With regards to the processing of your personal data (Article 4.1 of the Regulation) provided, we inform you that they will be processed by: Alpitour S.p.A., with registered office in Torino, Via Lugaro 15 – 10126, as Data Controller. Alpitour S.p.A. is parent company of Alpitour Group of which VOIhotels S.p.A. is part.

Data controller will process your Personal Data for the following purpose:

a) sending promotional and marketing communications, including the sending of newsletters and market research, through automated means (SMS, MMS, email, push notifications) and non-automated means (paper mail, telephone with operator); the Data Controller collects a single consent for the marketing purposes described herein, in accordance with the Decision issued on 4 July 2013 by the Italian Data Protection Authority “Guidelines on promotional activities and the fight against spam”; in any case, you may oppose to the processing of your personal data for marketing purposes performed with the means indicated herein, as well as revoke the consent given, at any time by contacting the Data Controller at the address indicated in this notice , without prejudice to the lawfulness of the processing based on consent given prior to its revocation

The legal basis for processing Personal Data for the above-mentioned purpose is the data subject’s consent (Article 6.1.a) of the Regulation).

The data subject may revoke the consent given and oppose to such processing at any time in an easy and free manner, by writing to the Servizio Privacy of the Data Controller at: privacy@alpitourworld.it.

The provision of your Personal Data for the purposes referred to in letter a) is optional; there is no consequence for your refusal to provide it.
Recipients and transfer of personal data
Your Personal Data may be shared with:
• natural persons authorized by the Data Controller to process Personal Data;
• third parties for the performance of economic activities, some of which act as Data Processors (the complete and updated list of data processor is available upon request to the Data Controller);
• persons, bodies or authorities to whom/which it is mandatory to communicate your Personal Data pursuant to legal provisions or orders from the authorities.

With regard to any transfer of personal data to third countries, the Data Controller informs that the processing will take place according to one of the means permitted by the applicable law, such as the consent of the data subject, the execution of a contract concluded between the data subject and the data controller, or the execution of pre-contractual measures taken at the request of the data subject; the conclusion or execution of a contract concluded between the data controller and another natural or legal person in the interest of the data subject; the adoption of Standard Contractual Clauses approved by the European Commission, appropriate safeguards (e.g. EU-US Privacy Shield), adequacy decisions. Further information is available upon request to the Data Controller.
Storage of personal data
Your Personal Data will be stored for the time necessary to perform the services provided for in the contract, so as to comply with the principle of data minimization and data storage under Article 5 of the Regulation. Further information is available by requesting it to the Data Controller.
Your privacy rights pursuant to Articles 15 et seq. of the Regulation
You have the right to ask the Data Controller, at any time, to access your Personal Data, correct or delete them, or request the limitation of processing, or obtain in a structured, commonly used and machine-readable format, the data concerning you in the cases provided for by Article 20 of the Regulation.

We also inform you that you have the right, under Article 21 of the Regulation, to oppose, for legitimate reasons, to the processing of your data, for example, by opposing at any time to direct marketing performed with automated means (SMS, MMS, email, push notifications) and traditional means (paper mail, phone calls); furthermore, you have the possibility of exercising this right only in part, that is, by opposing, for example, to the sending of promotional communications performed only via automated means.

At any time, under Article 7 of the Regulation, you may revoke the consent already provided, without prejudice to the lawfulness of the processing carried out prior to the withdrawal of such consent.

Requests must be sent in writing to the Servizio Privacy of the Data Controller at the address indicated above or to the Data Protection Officer at the address: DPO@alpitourworld.it.

In any case, you are always entitled to lodge a complaint with the competent supervisory authority, pursuant to Article 77 of the Regulation, if you believe that your personal data have been unlawfully processed.