Privacy and Cookie Policy
Pursuant to Arts. 13 and 14 of Regulation (EU) 2016/679 (GDPR) and current national legislation
Last updated: August 2026
1. Data Controller and Contact Information
The Data Controller is the operating company of Hotel Piccolo Tibet ***, with registered office in Livigno (SO), Italy.
To exercise your rights or for any clarification regarding the processing of your personal data, you may contact the Data Controller at the following addresses:
- Postal Address: Hotel Piccolo Tibet, Livigno (SO) – Italy
- Privacy E-mail: info@hotelpiccolotibet.it
- Certified E-mail (PEC): amministrazione@pec.piccolotibet.it
2. Categories of Processed Data, Purposes, and Legal Bases
Personal data is collected directly from the user and processed for the following specific purposes:
| Purpose of Processing | Type of Data | Legal Basis (GDPR) |
|---|---|---|
| Handling Requests and Quotes: Responding to inquiries sent via form, email, or telephone. | First name, last name, email, phone number, dates of stay, notes/preferences. | Performance of pre-contractual measures (Art. 6.1.b GDPR). |
| Managing Bookings and Stay: Execution and management of the hotel accommodation contract. | Personal identification data, ID document details, payment/credit card details. | Performance of a contract (Art. 6.1.b GDPR). |
| Legal Obligations and Public Safety: Reporting guest details to Public Safety Authorities (Alloggiati Web) and tax/accounting compliance. | Personal identification data, ID document details, billing/VAT data. | Legal obligation (Art. 6.1.c GDPR; T.U.L.P.S. Art. 109). |
| Direct Marketing and Newsletter: Sending promotional offers, events, and news about Livigno. | First name, email address. | Explicit and optional consent of the data subject (Art. 6.1.a GDPR). |
| Website Security and Fraud Prevention: Monitoring the proper functioning of the web infrastructure. | IP addresses, system logs, browsing data, browser type. | Legitimate interest of the Data Controller (Art. 6.1.f GDPR). |
3. Data Retention Period
Collected data will be stored only for as long as strictly necessary to achieve the purposes for which it was gathered:
- Contractual, administrative, and accounting data: Retained for 10 years to comply with statutory fiscal and civil law obligations.
- Public Safety data (Alloggiati Web): Deleted immediately after electronic transmission or retained in accordance with competent authority regulations.
- Contact data/quotes not resulting in a booking: Retained for a maximum of 24 months from the initial request.
- Marketing/newsletter data: Retained until consent is withdrawn (opt-out) by the user or for a maximum of 24 months from the last active contact.
4. Data Recipients and Transfers Abroad
Collected data will never be publicly disclosed and may only be communicated to authorized third parties or designated Data Processors (pursuant to Art. 28 GDPR):
- Technical service and web hosting providers, booking engine system suppliers, and web developers;
- Tax, administrative, and legal consultancy firms;
- Public Safety and Financial Administration authorities due to statutory obligations.
As a rule, data is processed within the European Economic Area (EEA). If providing certain services (e.g., newsletter platforms, cloud services) requires transfers to non-EU countries, this will occur exclusively to countries deemed adequate by the European Commission or upon adoption of the Standard Contractual Clauses (SCC) approved by the Commission.
5. Cookie Policy and List of Platforms
Cookies are small text files sent by visited websites to the user’s terminal. In compliance with the Italian Data Protection Authority Guidelines of June 10, 2021, this website uses the following types of cookies:
A. Technical Cookies (Necessary)
These do not require prior user consent as they are essential to enable website navigation and access to key functionalities (e.g., session management, saving cookie consent preferences, booking engine operation).
B. Analytical and Statistical Cookies
This site uses tools such as Google Analytics 4 with IP address masking/anonymization. Lacking direct identification potential, they are treated similarly to technical cookies.
C. Third-Party and Profiling Cookies (Subject to Consent)
These tools are activated only if the user explicitly consents via the Cookie Banner:
- Google Maps: To display the interactive map of the hotel’s location in Livigno.
- Social Widgets / YouTube: To embed multimedia content.
Managing Preferences: Users can review or modify their consent at any time by clicking on the link in the footer (“Manage Cookie Preferences“) or by directly configuring their web browser settings (Chrome, Firefox, Safari, Edge).
6. Rights of the Data Subject (Arts. 15-22 GDPR)
As a data subject, you are guaranteed all rights provided under European Regulations, which you may exercise at any time free of charge:
- Right of Access (Art. 15): Obtain confirmation as to whether or not personal data concerning you is being processed and receive a copy.
- Right to Rectification (Art. 16): Request the correction of inaccurate data or the completion of incomplete data.
- Right to Erasure / Right to be Forgotten (Art. 17): Request the deletion of your personal data where provided for by law.
- Right to Restriction of Processing (Art. 18): Request a temporary suspension of processing under specific conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): Object at any time to data processing based on legitimate interest or for direct marketing purposes.
- Withdrawal of Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you may send a formal request to: info@hotelpiccolotibet.it.
Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with the Competent Data Protection Authority (in Italy, www.garanteprivacy.it) if you believe the processing violates applicable laws.