Privacy policy

While consulting this website, it is possible that personal information and data will be collected as indicated in this disclosure. The disclosure refers exclusively to this website.

The data controller is LDC Italian Hotels S.r.l., with headquarters at Via Giorgio Zoega 59 – 00164 Rome, VAT number 03319150540, in the person of its company representative.

The Data Controller has not identified a Data Protection Officer (DPO), as it is not subject to the obligation to make this designation under Art. 37 of the Regulations.

In particular, data may be collected as follows:
“CONTACTS” page
Personal data may be communicated to the Data Controller through the “CONTACTS” page.
Users are asked not to provide personal data that are not pertinent; in any case, non-pertinent data will be eliminated, or in any event will not be considered.
Data transmitted through this page are processed only for purposes of responding to the user’s requests, based on the pre-contractual relationship between the parties.

“BOOK NOW” page
By visiting the “BOOK NOW” page, the user will be redirected to the booking engine to make the reservation. For additional information, refer to the privacy disclosure on that site. Please note that at the time of booking you will be asked for your e-mail address, on which you will receive confirmation of the booking you have made and a welcome questionnaire before your arrival at the hotel to speed up check-in.

“CAREERS” page
Using the appropriate page, it is possible to submit a job application by completing the form on the site. Data marked by an asterisk (first and last name, email, telephone number) are mandatory to allow the Data Controller to re-contact the user. The data transmitted are processed solely to re-contact the user, based on the authorization contained in the attached résumé.

Cookies and other tracking systems
For details, see the disclosure on cookies presented on this website.

The legal basis for processing is as follows:
• processing is necessary to meet a legal obligation of the Data Controller under Art. 6, paragraph 1, lett. c) of EU Regulation 2016/679;
• processing is necessary to pursue a legal interest of the Data Controller or third parties under Art. 6, paragraph 1, lett. f) of EU Regulation 2016/679;
• processing is necessary to execute a contract to which the data subject is a party or to execute pre-contractual measures adopted at their request under Art. 6, paragraph 1, lett. b) of EU Regulation 2016/679;
• processing is based on the data subject’s expression of consent, under Art. 6 paragraph 1 letter a) of EU Regulation 2016/679.

You may ask the Data Controller to clarify the actual legal basis for each processing, and in particular to specify whether the processing is based on the law or whether there is a contractual or pre-contractual relationship.

Data are processed by the assigned company personnel and are not communicated to unauthorized third parties.
Processing is performed by specially assigned persons under Art. 29 GDPR 2016/ 679, using computerized and/or electronic instruments, and may be either automatic and/or manual, as provided by Art. 32 GDPR 2016/679 on security measures.
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of personal data.
In some cases, in addition to the Data Controller, other parties involved in providing the services offered and organizing this website (hosting providers, information companies, parties involved in archiving, collecting, printing, sending and managing email, communication agencies, mail couriers), as well as outside parties and Data Processors appointed by the Data Controller, if necessary, may have access to the data. The updated list of Data Processors may always be requested from the Data Controller.

The data are processed at the Data Processor’s operating headquarters and in any other place where the parties involved in the processing are located. For additional information, contact the Data Controller.

The data subject’s personal data are also transferred outside the European Union to a third party country or recognized organization considered adequate through a decision of the European Commission (Art. 45 of EU Regulation 2016/679).

In accordance with the principles of lawfulness, limitation of purposes and minimization of data, under Art. 5 GDPR 2016/679, the data subject’s personal data will be retained for the period of time necessary to achieve the purposes for which they were collected and processed or to protect/exercise a right.
If processing is based on the data subject’s consent, the Data Controller may retain the personal data longer, until said consent is revoked. In addition, the Data Controller could be required to retain the personal data for a longer period in order to meet a legal obligation or to comply with an order from an authority.
At the end of the retention period, the personal data will be deleted. Therefore, after this period, the right of access, deletion, rectification, and data portability may no longer be exercised.

At any time, under Articles 15 to 22 of EU Regulation no. 2016/679, the data subject may exercise the right to:
a) request confirmation of whether or not personal data regarding them exists;
b) obtain information on the purposes of the processing, the personal data categories, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
c) rectify or delete data;
d) limit processing;
e) obtain data portability, that is receive them from a data controller, in a structured, commonly used and machine-readable form, and transmit them to another data controller without impediments;
f) oppose processing at any time; data subjects are reminded that if their data are processed for purposes of direct marketing, they may oppose processing without providing any reasons.
g) ask the data controller for access to the personal data and rectify or delete them, limit their processing, or oppose their processing, as well as the right of data portability;
h) revoke consent at any time, without prejudice to the lawfulness of processing based on consent prior to the revocation;
i) file a complaint with a supervisory authority. The data subject has the right to file a complaint with the Personal Data Protection Authority, located at Via di Monte Citorio 121, Rome (tel. +39 06696771), following the procedures and instructions published on the Authority’s website at www.garanteprivacy.it

The Data Controller may be contacted in the following ways:
– by email at matteo.mancini@ldchotels.com
– by telephone at +39 06 8781 2893
– by ordinary mail at Via Giorgio Zoega 59 – 00164 Rome

DATE OF LAST UPDATE OCTOBER 12, 2022