Privacy Policy

Data controller

The controller of the personal data collected through this website is Turismo Trentino Iniziative Srl, registered office at Strada per Vason, 118 – 38123 Trento (TN), Italy, VAT no. IT02468160227, legal representative Daniela Canelli, operating the Alpencity Hotels brand (“Alpencity Hotels”, “we”). For any request regarding the processing of your data you can write to amministrazione@alpencityhotels.com or call +39 0461 438 283.

What data we collect

We collect the data you give us voluntarily and the technical data needed for the site to work:
• identification and contact data (first name, last name, e-mail, phone) and message content when you use the contact form or write to us;
• service booking data (wellness treatments, day SPA, massages): service and date chosen, name, e-mail, phone, any notes. Please do not enter health data in the notes; if a treatment requires knowing particular conditions, they will be requested directly at the property and processed with your explicit consent;
• gift voucher purchase data: buyer’s name and e-mail, recipient’s name and message if any, amount, payment method and voucher code. Card data never pass through or are stored on our systems: they are handled by the payment provider you choose (Stripe, PayPal, Satispay) or, for bank transfers, reported to us by your bank;
• guest area data, if you use it (for example after scanning the QR code in your room): Google account (name, e-mail and account identifier), property, room, stay dates, phone number and the services you booked;
• browsing data (IP address, browser type, pages visited, date and time) automatically recorded by the systems that run the site, and your cookie choice.
Stay bookings are made on the external booking engines linked from the site, which process data under their own notices.

Purposes and legal bases

We process data to: (a) answer requests sent through the contact form or by e-mail (Art. 6.1.b GDPR and legitimate interest, Art. 6.1.f); (b) manage service bookings and the sale, delivery and use of gift vouchers, including payment, receipts and support (Art. 6.1.b); (c) manage the guest area and bookings made by hotel guests (Art. 6.1.b); (d) ensure the security and proper operation of the site and prevent fraud and abuse (Art. 6.1.f); (e) comply with legal, tax and accounting obligations (Art. 6.1.c); (f) record your cookie choices as proof of consent (Art. 6.1.c and 7.1 GDPR); (g) send commercial communications or newsletters, only with your explicit consent (Art. 6.1.a), which you can withdraw at any time.

Providing your data

Providing the data marked as mandatory in the contact form is necessary to be able to reply; without it we cannot follow up on your request. Consent to commercial communications is always optional.

Methods and retention

Data are processed electronically with appropriate security measures by authorised staff. We keep: contact requests for the time needed to handle them and in any case no longer than 24 months after the last contact; service booking data for 24 months from the date of the service; order and voucher data for 10 years (tax and accounting obligations), while the message to the recipient is kept until the voucher expires; guest area data up to 12 months after the end of the stay, unless you ask for deletion; the cookie choice log for 15 months; browsing data for limited periods and for security purposes.

Recipients of the data

Data may be processed, as data processors, by providers who deliver services on our behalf: hosting and IT maintenance, e-mail, payment providers (Stripe, PayPal, Satispay), Google (guest area login), stay booking engines. The Alpencity Hotels properties delivering the service receive the data needed to perform it. Data are neither disclosed nor sold to third parties and may be communicated to public authorities where required by law.

Account and Google sign-in

Access to the guest area uses your Google account: we only receive your name, e-mail and account identifier, never your password. Google processes data as an independent controller under its own notice. You can ask us to delete your account at any time by writing to amministrazione@alpencityhotels.com.

Transfers outside the EU

Where some providers process data outside the European Economic Area, the transfer takes place only with the adequate safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

Your rights

At any time you may request access to your data, rectification, erasure, restriction of processing, portability and object to processing (Arts. 15-22 GDPR), and withdraw any consent given. To exercise your rights write to amministrazione@alpencityhotels.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Links to third-party websites

The website contains links to external sites (for example the websites of the individual hotels, booking engines and social profiles). Alpencity Hotels is not responsible for the privacy policies of those sites, which we invite you to read.

Updates

This notice may be updated to reflect legal changes or changes to the services offered. The version in force is always the one published on this page.