Privacy Policy | Vistamare Hotels UK

1. Data Controllers

The website www.vistamarehotel.co.uk is a portal presenting two accommodation facilities managed by separate legal entities, each acting as an independent Data Controller with regard to the personal data processed within its own business activities.

Data submitted through the forms available on the website is forwarded to the competent Data Controller depending on the accommodation facility concerned.

2. Categories of Personal Data Processed

• Identification data (first name, last name)
• Contact details (email address, telephone number)
• Data relating to stay or booking requests
• Browsing data (IP address, technical device data)
• Any additional information voluntarily provided by the user

3. Purposes of Processing

• Management of enquiries and quotation requests
• Management of bookings and reservations
• Administrative, accounting and tax compliance
• Sending promotional communications and newsletters (subject to consent)
• Statistical analysis of website usage
• Compliance with legal obligations

4. Legal Basis for Processing

Personal data is processed pursuant to Article 6 of the UK GDPR and the Data Protection Act 2018 on the basis of:

• Performance of a contract or pre-contractual measures
• Compliance with legal obligations
• Explicit consent of the data subject (for marketing and profiling activities)
• Legitimate interests of the Data Controller (website security and fraud prevention)

5. Methods of Processing

Data is processed using electronic and IT tools in accordance with the principles of lawfulness, fairness, transparency and data minimisation provided for by the UK GDPR.

Appropriate technical and organisational measures are implemented to ensure the security and protection of personal data.

6. Data Retention

• Enquiry data: up to 24 months
• Booking and accounting data: up to 10 years (as required by applicable law)
• Marketing data: until consent is withdrawn
• Browsing data: as specified in the Cookie Policy

7. Disclosure and Data Recipients

Personal data may be shared with third parties appointed as Data Processors, including:

• Hosting and IT service providers
• Administrative and tax consultants
• Online booking platforms
• Analytics service providers (e.g., Google Analytics)
• Advertising platforms (e.g., Google Ads, Meta Ads)
• Newsletter service providers

8. Use of Google Tag Manager and Analytics Tools

The website uses Google Tag Manager to centrally manage tracking tags. Google Tag Manager does not directly collect personal data but enables the activation of tools such as Google Analytics and Meta Pixel.

Google Analytics 4 is used to analyse website usage statistics. Personal data may be transferred to the United States in compliance with applicable safeguards, including adequacy decisions or standard contractual clauses where required.

Processing for statistical and marketing purposes takes place only upon the user's explicit consent via the cookie banner.

9. International Data Transfers

The use of services provided by Google LLC and Meta Platforms Inc. may involve transfers of personal data outside the United Kingdom and the European Economic Area.

Such transfers are carried out in accordance with the UK GDPR and applicable international data transfer mechanisms, including adequacy regulations or appropriate safeguards.

10. Data Subject Rights

Data subjects may exercise the rights provided under Articles 15–22 of the UK GDPR at any time, including:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to object to processing
• Right to data portability

Requests may be submitted to: info@vistamarehotel.it

Data subjects also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).

11. Updates

This Privacy Policy is current as of the date of publication and may be subject to updates due to legal or technical changes.