Privacy Policy
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
(Article 13 of EU Regulation 2016/679 – GDPR)
INTRODUCTION
B&T S.p.A. has always paid particular attention to protecting users’ personal data. Through this Privacy Notice (provided pursuant to EU Regulation 2016/679, hereinafter the “GDPR”), B&T S.p.A. describes how it processes the personal data of individuals (“Data Subjects”) who:
Browse and use this website, accessible at www.dorelanhotel.com (the “Website”);
Complete digital contact forms made available via QR codes or dedicated devices at trade fairs, exhibitions and industry events attended by the Data Controller.
This Privacy Notice does not apply to other external websites or online services that may be accessible through links on the Website.
TABLE OF CONTENTS
SECTION 1 – PRIVACY POLICY
What data do we process?
For what purposes and on what legal basis do we process personal data?
How long do we retain personal data?
Who processes personal data? Data Controller and DPO
Who are the recipients of personal data?
Where is personal data processed?
What rights do Data Subjects have?
SECTION 2 – COOKIE POLICY
SECTION 1 – PRIVACY POLICY
1. WHAT DATA DO WE PROCESS?
1.1. Browsing Data
The IT systems responsible for the operation of the Website collect, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols (e.g. IP addresses, domain names of the computers used by visitors, the time of the request, the method used to submit the request to the server, etc.).
1.2. Data Provided by Users Through Website Forms or Email
The optional, explicit and voluntary sending of messages to the contact addresses or the completion of forms available on the Website (e.g. “Contact us to find out more about becoming a Dorelan Hotel”, “Experience our products first-hand”, “How to request a rental service”) entails the collection of the requester’s identification and contact details (first name, last name, email address, telephone number, city, country, profession and preferred language), as well as information about the accommodation facility or hotel with which they are affiliated or that they own. Such data are necessary to assess potential contractual proposals or arrange appointments.
1.3. Data Collected at Trade Fairs and Events (via QR Codes / Dedicated Forms)
When attending trade fairs and industry events, users may choose to complete digital forms accessible by scanning a QR code displayed at the Dorelan stand or by using devices made available by the Data Controller. In this context, identification and contact details are collected (first name, last name, email address, telephone number, business role, country of origin and preferred language). These details are provided by the Data Subject to request information, quotations, appointments or promotional materials.
1.4. Data for Newsletter Subscriptions and Informational Materials
This includes the email address and name voluntarily provided by users when subscribing to the newsletter or downloading guides, catalogues and informational materials made available on the Website or at trade fairs.
1.5. Cookies and Other Tracking Technologies
For a detailed description of cookies and similar technologies, please refer to Section 2 (Cookie Policy) of this document.
2. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS PERSONAL DATA?
2.1. Browsing Data
Purpose of processing: To ensure the proper functioning of the Website and secure browsing.
Legal basis: The Data Controller’s legitimate interest in ensuring the proper functioning of the Website (Article 6(1)(f) GDPR).
2.2. Data Collected Through Website Forms
Purpose of processing: To respond to requests submitted by users (e.g. requests for information, rental services, showroom appointments or contractual assessments).
Legal basis: The implementation of pre-contractual measures or the performance of contractual obligations, at the request of the Data Subject (Article 6(1)(b) GDPR).
2.3. Data Collected via QR Codes / At Trade Fairs (Follow-up)
Purpose of processing: To respond to requests for quotations, information, catalogues or meetings submitted by Data Subjects at the trade fair stand.
Legal basis: The implementation of pre-contractual measures taken at the request of the Data Subject (Article 6(1)(b) GDPR).
2.4. Marketing, Newsletters and Trade Fairs
Purpose of processing: To send periodic promotional communications, invitations to future trade fairs and events, newsletters and commercial materials relating to Dorelan Hotel products and services.
Legal basis: The user’s freely given and explicit consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.
2.5. Downloading Guides and Catalogues
Purpose of processing: To provide the digital materials requested by the user and identify the requester.
Legal basis: Performance of the requested service (Article 6(1)(b) GDPR).
2.6. Soft Spam (Email)
Purpose of processing: To send commercial communications relating to products similar to those previously purchased by the user.
Legal basis: The Data Controller’s legitimate interest (Article 6(1)(f) GDPR and Article 130(4) of Legislative Decree No. 196/2003).
3. HOW LONG DO WE RETAIN PERSONAL DATA?
Browsing data: Deleted immediately after processing or retained for a maximum of 7 days, except where further retention is required for the investigation of cybercrime.
Data collected through contact forms (Website and trade fairs, for commercial enquiries and quotation requests): Retained for the time strictly necessary to handle the request and, in any event, for no longer than 12 months from the date of collection.
Data processed for marketing and newsletter purposes (Website and trade fairs): Retained until the user withdraws their consent or for a maximum period of 24 months from the date of collection or subscription.
Data processed through cookies: Please refer to Section 2 (Cookie Policy).
Once the applicable retention periods have expired, personal data will be deleted or irreversibly anonymised.
4. WHO PROCESSES PERSONAL DATA? DATA CONTROLLER AND DPO
Data Controller: B&T S.p.A. (Tax Code/VAT No.: 00903510402), with registered office at Via Due Ponti No. 9, 47122 Forlì (FC), Italy.
Email: privacy@dorelan.it
Certified email (PEC): dorelancertificata@pec.it
Telephone: +39 0543 1917400
Data Protection Officer (DPO): The DPO may be contacted at the Data Controller’s registered office or by email at dpo_f@fclex.it.
5. WHO ARE THE RECIPIENTS OF PERSONAL DATA?
Personal data will be processed by authorised personnel of B&T S.p.A. They may also be disclosed to third parties appointed as Data Processors pursuant to Article 28 GDPR, including:
IT service providers, Website management providers and cloud infrastructure providers;
Platforms used to send newsletters and marketing communications (e.g. Brevo);
Consultants and service providers involved in organising trade fairs and events.
6. WHERE IS PERSONAL DATA PROCESSED?
Personal data are stored on servers located within the European Union.
Where certain service providers or technologies (e.g. cookies or cloud platforms) involve transfers of personal data to countries outside the EU, particularly the United States, such transfers will be carried out in accordance with the safeguards required by the GDPR, including adequacy decisions under Article 45 or standard contractual clauses under Article 46, as applicable.
7. WHAT RIGHTS DO DATA SUBJECTS HAVE?
B&T S.p.A. ensures that every Data Subject can exercise the rights granted under the GDPR in relation to the processing of their personal data at any time.
More specifically, each Data Subject has the right to:
Access: Obtain confirmation as to whether or not their personal data are being processed by the Data Controller and, where this is the case, access those data and obtain a copy thereof (Article 15 GDPR).
Rectification: Request the correction of inaccurate personal data or the completion of incomplete data (Article 16 GDPR).
Erasure: Request the deletion of their personal data (the “right to be forgotten”) in the cases provided for under Article 17 GDPR.
Restriction of processing: Request the restriction of processing in the cases provided for under Article 18 GDPR.
Data portability: Receive the personal data processed by the Data Controller in a structured, commonly used and machine-readable format and, where technically feasible, request that such data be transmitted to another data controller without hindrance (Article 20 GDPR).
Objection: Object to the processing of their personal data for direct marketing purposes (Article 21 GDPR).
These rights may be exercised by contacting the Data Controller using the contact details provided in Section 4 of this Privacy Notice.
Furthermore, Data Subjects who believe that the processing of their personal data through this Website infringes the GDPR have the right to lodge a complaint with the competent supervisory authority, pursuant to Article 77 GDPR. In Italy, the supervisory authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.
Data Subjects also have the right to seek a judicial remedy before the competent courts, pursuant to Article 79 GDPR.
8. HOW LONG DO WE RETAIN PERSONAL DATA?
B&T S.p.A. will process your personal data for the period reasonably necessary to achieve only the purposes described in the preceding sections.
At the end of the applicable retention period, your personal data will be deleted or irreversibly anonymised and aggregated.
For information regarding the retention and deletion periods applicable to data processed through cookies, please refer to our Cookie Policy.