Notice on the Processing of Personal Data collected via this website
Last revised: 14 July 2026

1. Introduction and regulatory references
This notice describes the processing of personal data collected via this website, including data obtained through the use of cookies, tracking technologies and — where applicable — contact forms, financial transactions and any other features that may be available on the site.
This notice is intended for anyone who accesses or uses this website, and explains how the user’s personal data is collected, used and protected, as well as the rights granted by law.
These provisions do not apply to other websites, pages or online services accessible via external links that may appear on this site; in respect of these, you are advised to consult the relevant privacy notices.
This notice is provided in accordance with the main national and international regulations on the protection of personal data, including:

• Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC, known as the ePrivacy Directive
• Swiss Federal Act on Data Protection (nFADP / FADP)
• Other regulations that may apply.

2. Who is responsible for your data and how can you contact us?
Your personal data is processed by:
Park Hotel Bellevue
Via Campo Carlo Magno 3, Carciato hamlet, 38025 Dimaro Folgarida (TN)
info@parkhotelbellevue.eu
VAT number: 02712720222

For any information regarding the processing of personal data or to exercise the rights granted by law, data subjects may contact the Data Controller.

3. On what legal grounds do we process your data?
The processing of personal data collected via this website (including data collected by means of cookies, similar technologies, contact forms, financial transactions and any other features that may be active on the site) is based on one or more of the following legal grounds:

1. Performance of pre-contractual or contractual measures: where processing is necessary to respond to user requests, provide the requested services and, where the website so provides, manage orders, accounts or contractual relationships.
2. Compliance with legal obligations: where processing is necessary to comply with tax, accounting, administrative or security obligations, or with requests from the authorities.
3. Express consent of the user in relation to communications of an informational or commercial nature;

A further legal basis, the legitimate interest of the Data Controller, may be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the Data Controller’s rights in legal proceedings).

Failure to accept or the withdrawal of consent may restrict certain features or services on the website, such as receiving marketing communications or subscribing to the newsletter.

4. What data do we collect when you visit the website?
Whilst browsing this site, the following data may be collected, including by means of cookies and similar technologies such as pixel tags, web beacons, local storage and equivalent technologies – namely:

• Navigation and technical data: information such as IP addresses, device identifiers, data relating to the operating system and browser, requested URLs, connection times, technical logs, technical preferences, and usage data collected via cookies and tracking technologies (pixel tags, web beacons, local storage and equivalent tools).

• Personal data provided voluntarily: information entered into the digital forms on the website (e.g. first name, surname, email address, telephone number) and/or provided by sending emails or via other contact channels, used to respond to enquiries, provide services and offer advice, and — subject to consent — to send informational or commercial communications.

• Data relating to purchases, payments and financial transactions: collected only if the website offers paid services and handled in accordance with specific security measures. The Data Controller does not retain the full details of payment methods, unless otherwise stated. Transaction data is processed to manage the purchase, fulfil accounting and tax obligations, prevent fraud and protect the Data Controller’s rights.

• Data relating to reviews and feedback: information provided by completing review forms or via feedback collection systems on the site, including ratings, comments, opinions expressed, any answers to specific questions and other data intentionally entered by the user during the review process.

5. How do we process your data, how do we protect it and how long do we keep it?
The personal data collected via this website is processed mainly by electronic and digital means in accordance with the principles of lawfulness, fairness, data minimisation, integrity and confidentiality.

Appropriate technical and organisational measures are put in place to prevent unauthorised access, loss, alteration or unauthorised disclosure of data, including:

• Encryption of communications (https): Communications between your browser and the website are protected by HTTPS encryption, a measure designed to reduce the risk of the data transmitted whilst browsing being intercepted or tampered with;
• Log monitoring: the system records and monitors access and activities in order to detect suspicious or unauthorised attempts and ensure the security of the data;
• Regular backups: Data is copied and stored at regular intervals to protect it from any accidental loss or technical incidents;
• Security audits and checks: security checks and tests are carried out regularly to identify and rectify any system vulnerabilities;
• Restriction of data access to duly authorised persons only: Access to personal data is permitted only to authorised and trained staff, in accordance with internal security policies.

Data is retained in accordance with the following timeframes:

• Cookie preferences and consents: retained for 180 days, as set out in the Cookie Policy on this site.
• Navigation and technical data: retained for the time strictly necessary for security purposes and, as a rule, for no longer than 12 months, after which it is deleted or anonymised, except where longer periods are required by legal obligations or by the need to establish, exercise or defend a right in legal proceedings.
• Data relating to any contractual relationships entered into with the Data Controller: Where such data exists, it is retained for the duration of the relationship and, thereafter, for the period required by the applicable legal obligations (for example, in relation to accounting and tax matters).
• Data processed for marketing purposes: retained until consent is withdrawn or a request for erasure is made. In the absence of such requests, the data is retained for a maximum period of 24 months from the last significant interaction (e.g. opening a message, opening or clicking on a message, or submitting a request via the website).
• Data entered via forms or specific requests: retained for the time necessary to respond to the request and to fulfil the related purpose, and thereafter for any period required by legal obligations.

6. Who can receive your data?
The following may access the personal data collected via this website, within the limits of their respective responsibilities and purposes:

• Authorised internal staff designated by the Data Controller, having received appropriate training on data protection and security matters;
• Suppliers and third parties appointed as data processors (for example: technical service providers and IT services, website maintenance, email providers, consultants, where applicable);
• Third parties that provide services integrated into the website (e.g. fonts, maps, image display), which may process technical data as independent data controllers in accordance with their own privacy notices (in which case please also refer to the individual privacy notices of such third parties);
• Competent public authorities and supervisory bodies, within the limits laid down by law or in order to comply with requests from the judicial authorities;

The updated list of external recipients can be provided on request by writing to the Data Controller using the contact details provided.

7. Where might your data be transferred?
Personal data collected via this website may be processed within the European Union / European Economic Area. In some cases, the use of third-party services may involve a transfer to third countries. Where transfers to the United States take place, these are made to providers that comply with the EU-US adequacy framework (Data Privacy Framework) or, failing that, on the basis of Standard Contractual Clauses.

Countries to which data may be transferred outside the European Economic Area: United States

8. What are your rights regarding the data collected?
Under the applicable legislation, the user has the right to:

• To obtain confirmation as to whether or not personal data relating to them is being processed and, if so, to obtain access to that data and the related information (right of access).
• Request the rectification, updating or erasure of data that is inaccurate or no longer necessary (right to rectification and erasure).
• Request the restriction of, or object to, the processing of data, including for promotional or profiling purposes, where applicable.
• Request that data be provided in a structured and interoperable format (where technically possible).
• You may withdraw any consent given at any time, without this affecting the lawfulness of processing carried out on the basis of that consent prior to the withdrawal (for example, for the sending of marketing communications or newsletters, where applicable).
• Withdraw your consent to the use of non-technical cookies and to the processing of data collected via tracking tools.
• Please report any irregularities or abuses to the relevant supervisory authorities.

To exercise these rights, simply send a request to the Data Controller’s contact details. The Data Controller will respond without undue delay and, in any event, within one month of receiving the request; this period may be extended by a further two months in the event of particular complexity or a high volume of requests, in which case the data subject will be informed.

9. How is data relating to minors processed?
The protection of minors is a key priority.

This website is not intended for minors and does not intentionally collect their data via its forms. Where, in the context of a request or enquiry, the user provides personal data relating to third parties — including any minors — they must ensure that they are authorised to do so; such data will be processed within the limits and for the purposes of the request, in accordance with the applicable legislation. For requests regarding rectification, restriction or erasure, please contact the Data Controller using the contact details provided.

10. How can you make reports or complaints to the authorities?
If you believe that the processing of your personal data via this website does not comply with the applicable legislation, you may lodge a complaint free of charge with the relevant supervisory authorities, including:

• The Data Protection Authority or personal data protection authority in your country of citizenship or residence;
• Swiss Authority (FDPIC)

11. How do we inform you of changes to this notice?
This notice is subject to periodic review to reflect changes in regulations or modifications to the services offered via the website. Any significant changes will be communicated via this page.
Last revised: 14 July 2026