Online Privacy Policy

General Data Protection Information

Grand Marcello Hotel & SPA would like to clearly set here -with this Online Privacy Policy Document- what happens to your personal data when you visit our website or application located at/called as “http://www.grandmarcellohotel.com” by any means. Personal data is described that as “all data with which you can be personally identified” by Law. You can find detailed information on the subject of data protection further in this document.

COLLECTION OF PERSONAL DATA ON OUR WEBSITE

Who is Responsible For Data Collection on This Website?

The data processing on our website is carried out by ………… You can find their contact details in the footer of the website.

How Do We Collect?

The user data related to you is collected by the website when you provide it. This can be, for example, data that you enter in any blanks of different forms can be found on the website. Other data are automatically collected and recorded by our IT system when you visit this website by any technical means. This data is generally some sort of technical data (e.g. internet browser type, operating system or time of the page view). This data is collected automatically as soon as any visitor enters the website.

What Do We Use It For?

Some of the data is collected in order to ensure that the website is error-free for your fullfillment. Other data can be used to analyze your user behavior and so on.

Rights on Your Data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. If you have further questions about data protection and your rights about it, then you can contact us at any time. You also have the right to file a complaint with the related data protection supervisory authority in your country or residence.

Third-party Analysis Tools

When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis software. Your surfing behavior is analyzed anonymously; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain type of tools located around the web or present at this website.

GENERAL INFORMATION AND MANDATORY INFORMATION

Privacy

We try to take the upmost protection of your personal data. We treat your personal data confidentially and in accordance with the related data protection laws. We point out that a complete protection of the data against access by third parties is not possible while any data transmission over the Internet.

Note on The Responsible Body

The responsible body (who, alone or jointly with others, decides on the purposes and means of processing personal data) for data processing on this website is: …
Telephone: 90 212 517 67 15
E-Mail: [email protected]

Revocation of Your Consent To Data Processing

Many data processing operations are only possible with website visitor’s/user’s express consent. You can revoke your consent at any time by e-mail. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right of Appeal To The Responsible Supervisory Authority

In the event of violations of data protection law, the person concerned has the right to file a complaint with the competent supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent.

REncryption

For security reasons and to protect the confidential content, such as orders or inquiries that you send to us, our website uses encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If the encryption is activated, the data that you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing. Payment transactions using common means of payment (Visa / MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Information, Blocking, Deletion

Within the framework of the applicable statutory provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. You can reach us at any time by contact information provided in this document.

DATA COLLECTION ON OUR WEBSITE

Cookies

Some of the websites use cookies. Cookies do not harm your device and do not contain viruses. Cookies serve to make our service more user-friendly, more effective and safer. Cookies are small text files that are stored on your device and saved by your browser. Most of the cookies we use are called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser/device the next time you visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted. Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6 Paragraph 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, they will be treated separately in this data protection declaration.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data will not be merged with other data sources.
The basis for data processing is Article 6 (1) (f) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact Form

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal e-mail to us is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Registration on This Website

You can register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise we will reject the registration. For important changes, for example in the scope of the offer or for technically necessary changes, we will use the e-mail address provided during registration to inform you in this way. The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation. The data recorded during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

Processing of Data (Customer and Contract Data)

We collect, process and use personal data only insofar as they are necessary for the establishment, content or change of the legal relationship (inventory data). This is done on the basis of Article 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. We collect, process and use personal data on the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or to bill. The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.

Data Transfer When Concluding a Contract For Hotel Websites or Other Forms of Dealers

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the company entrusted with the hotel facilities management or the credit institution commissioned with the processing of related payments. A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes. The basis for data processing is Article 6 (1) (b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.

Data Transfer When Concluding A Contract For Services And Digital Content

We only transmit personal data to third parties if this is necessary in the context of contract processing, for example to the credit institute commissioned to process payments. A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes. The basis for data processing is Article 6 (1) (b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.

Online Application

In the course of your online actions, we can collect and if collected we can process the following personal application data from you: Name, first name, birthday, address, telephone number, mobile phone number, documents. The collection and processing of your personal data takes place exclusively for the purpose of fulfilling your expectations within the service provided by our company. In principle, your data will only be forwarded to the internal departments and departments of our company responsible for the specific application process. Your personal application data will not be passed on to other companies without your prior express consent. Your application data will not be used or passed on to third parties beyond this. Your data will be deleted automatically three months after the related process has been fully completed. This does not apply if statutory provisions prevent deletion, further storage is necessary for the purpose of providing evidence or you have expressly consented to longer storage.

SOCIAL MEDIA

No social media plugins/cookies are currently used.

Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit.f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl

Objection against data collection

You can prevent Google Analytics from collecting your data. An opt-out cookie will be set which prevents the collection of your data on future visits to this website. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted. If you do not have a Facebook account, you can deactivate usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

Plugins and Tools

Youtube

Our website uses plugins from YouTube, operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. You can find more information on handling user data in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. You can find more information on handling user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy

Payment providers

PayPal

On our website we offer payment via PayPal, among other things. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you choose to pay via PayPal, the payment details you have entered will be transmitted to PayPal. Your data is transmitted to PayPal on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

Iyzico Instant Transfers

On our website we offer, among other things, payment by means of “instant transfer”. The provider of this payment service is iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (Turkey) Burhaniye Mahallesi Atilla Sokak No:7 Üsküdar İstanbul (hereinafter “İyzico”). Another provider of this payment service is Stripe INC (USA) 510 Townsend Street San Francisco, CA 94103 United States (hereinafter “Stripe”). With the help of this process, we receive a real-time payment confirmation from İyzico or Stripe and can immediately begin to meet our obligations. In addition to the PIN and TAN, the payment data you have entered and your personal data are also transmitted to this company. Your personal data is your first and last name, address, telephone number (s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent attempted fraud. The transfer of your data to İyzico takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.