{"id":2665,"date":"2024-02-22T12:20:39","date_gmt":"2024-02-22T11:20:39","guid":{"rendered":"https:\/\/opera-hotels.com\/privacy-policy\/"},"modified":"2025-02-07T09:09:19","modified_gmt":"2025-02-07T08:09:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/opera-hotels.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\t\t\t\t
Home<\/span><\/div>\n\n\t\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

WHY THIS INFORMATION NOTICE<\/strong><\/p>

This information notice is provided pursuant to Article 13 of GDPR 679\/2016, the “General Data Protection Regulation,” which sets out provisions on the processing of personal data 679\/2016.<\/p>

SCOPE OF APPLICATION\/WEBSITE<\/strong><\/p>

This information notice applies to:<\/p>

  1. The company Opera SRL, with registered office at Via Donizetti, 36\u00a0–<\/strong>\u00a020122 Milan;<\/li>
  2. Hotels\/facilities included in the portfolio managed by Opera SRL. The list of hotels and facilities is regularly updated and can be consulted on the website\u00a0 www.opera-hotels.com\/en<\/a><\/li><\/ol>

    The information herein pertains only to what is indicated in the Scope of Application and not to other websites that users may visit through external links. The Data Controller is not responsible for the processing of personal data and information by these third parties. If the User provides information on third-party websites, the data protection provisions and terms of use of the services on those sites will apply, and we encourage the User to read them.<\/p>

    1. DATA CONTROLLER<\/strong><\/p>

    The Data Controller is:<\/p>

    OPERA SRL, Via Donizetti, 36 – 20122 Milan<\/p>

    e-mail: info@opera-hotels.com<\/a><\/p>

    2. DATA PROCESSED<\/strong><\/p>

    Personal data includes any information or data through which an individual can be identified, either directly or indirectly.<\/p>

    Opera S.r.l. is firmly committed to protecting and respecting users’ privacy. This Privacy Policy details what personal data may be processed in specific cases, indicating in Article 3 the purposes for which such data may be processed.<\/p>

    a. Browsing Data <\/strong><\/em>
    The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
    This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.\u00a0
    These data are necessary for the use of the web service. They are also used solely for the purpose of obtaining anonymous statistical information on site usage and to ensure its proper functioning.<\/p>

    b. Personal Data Collected Through Contact Forms or Addresses on the Site <\/em><\/strong>
    When requesting information, we may collect personal data such as name, email address, and additional information the User enters in the “message” field.<\/p>

    c. Personal Data Collected Through Online Registration\/Check-in <\/em><\/strong>
    When contacting us or filling out forms on the website, we may collect personal data including: personal and contact details; nationality; payment data such as credit card number and related details; and information on additional services\/products purchased.<\/p>

    3. PURPOSE OF DATA PROCESSING<\/strong><\/p>

    I.<\/strong> Compliance with legal, administrative, accounting, and tax obligations required of the Data Controller;<\/p>

    II. <\/strong>Managing online bookings to fulfill the User’s requests; Managing online bookings to fulfill the User’s requests;<\/p>

    III.<\/strong> Responding to the User’s information requests;<\/p>

    IV. <\/strong>Collecting stay information and conducting aggregated statistical processing of data;<\/p>

    V.<\/strong>\u00a0Based on applicable regulations, the Data Controller may use the email address provided when purchasing a service to offer similar services\/products. However, if the User does not wish to receive such communications, they may notify the Data Controller at any time at info@opera-hotels.com<\/a>, and the activity will be discontinued promptly.<\/p>

    4. DISCLOSURE OF PERSONAL DATA<\/strong><\/p>

    The User’s personal data may be disclosed to:<\/p>

    – The hotels\/facilities included in the Controller\u2019s Portfolio that require data processing for the correct provision of selected services and exclusively for the purposes described above;<\/p>

    – Third parties providing outsourced services to the Data Controller and acting as Data Processors based on a contract\/appointment (an updated list of Data Processors is available upon request);<\/p>

    – Public Administration, judicial authorities, and other entities where disclosure is legally required. These entities will process data as independent Data Controllers.<\/p>

    The User’s personal data are processed exclusively by personnel duly authorized and bound by confidentiality obligations.<\/p>

    5. LEGAL BASIS FOR PROCESSING<\/strong><\/p>

    Each processing activity is justified by one of the following legal bases:<\/p>

    Pre-contractual\/Contractual: Processing is necessary to execute a contract between the parties.<\/p>

    Legal Obligation: Processing is necessary to comply with a legal obligation.<\/p>

    Legitimate Interest: Processing is necessary for the pursuit of the Data Controller\u2019s legitimate interest, provided that the User’s fundamental rights and freedoms do not override it.<\/p>

    Consent: Processing is carried out only when the User has given consent for specific purposes. Consent may be revoked at any time by contacting the Data Controller as specified in the relevant section.<\/p>

    6. DATA PROCESSING AND STORAGE METHODS<\/strong><\/p>

    The User\u2019s personal data will be processed both electronically and manually, using measures and tools designed to ensure maximum security and confidentiality, by qualified and duly authorized personnel in compliance with the GDPR.<\/p>

    Data is stored on servers located within the EU. However, if necessary, the Data Controller may transfer data outside the EU, ensuring compliance with applicable laws (Articles 45, 46, 47, 49 GDPR).<\/p>

    Personal data is retained only for the time necessary to fulfill the purposes for which it was collected, and to meet legal, accounting, or reporting requirements.<\/p>

    To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes by other means, as well as the applicable legal requirements.<\/p>

    Specifically:<\/p>