PRIVACY POLICY

The data controller is GREENBLU S.r.l. Joint controllers are GETUR LEVANTE S.r.l. and DIERRESSETI SERVICE S.r.l.
Through this website we process your data mainly for the following purposes:

  1. To manage your booking at our facility;
  2. To respond to your requests for information submitted via the dedicated form on the Promo page;
  3. To reply when you use the contact details available on the website (phone, email, active social media pages);
  4. To contact you by phone, if you have already been our guest, made a booking, or provided your phone number, in order to inform you about promotions, special offers, events, or initiatives organized at our facility;
  5. To send you email communications if you have already been our guest, made a booking, or requested a quote, in order to inform you about promotions and special offers related to your request (so-called “soft spam”);
  6. To receive feedback or suggestions about your experience at our facility;
  7. To activate the newsletter service upon your request.
  8. To receive job applications through the “Work With Us” page.

Requests for information received through these channels will be stored for 10 years.

Your newsletter subscription will remain active until you request cancellation through the procedure indicated at the bottom of each of our emails. We may use your phone contact details to send communications regarding promotions, offers, and events organized by the facility, exclusively to users who have already made a booking or have been guests, until you object. You may object at any time by contacting us using the details provided in this policy. In any case, we will retain your phone number for promotional purposes for 24 months from your last interaction with us. Additionally, we will retain your email address, provided for bookings or quote requests, for marketing purposes for 36 months from your last interaction.

Finally, the CVs received through job applications will be stored for up to 3 years, after which only contact details will be retained to request an updated CV.

Certain types of personal data of website users may be accessible to providers who supply website hosting services, email services, and website maintenance support. Additionally, authorized employees or collaborators of the facility may access the data.

We also use technical, analytical, and marketing cookies, as described in our cookie policy.

Please note that this notice only covers the processing of personal data carried out through the website. Once you arrive at our facility, you will be provided with a new notice covering all data processing related to your stay.

YOUR RIGHTS
You always have the right to receive all necessary information regarding the processing of your personal data, and to obtain access to and a copy of such data. You also have the right to request the updating, completion, correction, or deletion of your personal data.
At any time, you may object to all or part of the processing of your data or request its restriction. For data processed on the basis of consent or for the performance of a contract, you may also request data portability.
If you believe that your data is being processed in violation of Legislative Decree No. 101/2018, you have the right to lodge a complaint with the competent authority.

1. Who processes your data

As the operator of this website, GREENBLU S.r.l. is the Data Controller of the personal data of users browsing its pages. Joint Controllers are GETUR LEVANTE S.r.l., with registered office in Zona Industriale, 70015 Noci (BA), and DIERRESSETI SERVICE S.r.l., with registered office in Via Degli Aragonesi no. 44, 75100 Matera.

Contact details: email: privacy@greenblu.it

The Data Controller has appointed Dr. Francesco Martino Panetta as Data Protection Officer (DPO), who can be contacted at: dpo@greenblu.it

2. What data the website processes

A) Personal data voluntarily provided by the user. These are the personal data that you choose to provide voluntarily in the following ways:

  1. when subscribing to the newsletter, by providing your first name, last name, and email address;
  2. when requesting more information about a possible stay by filling out the form on the PROMO page. In this case, in addition to contact details, we ask for arrival and departure dates, the possible presence of children, and their ages;
  3. when you send feedback or suggestions about your experience at our facility. You may also indicate whether you prefer to be contacted by email or phone;
  4. when you contact us by phone or email, through social networks, or via platforms indicated on the website that link to our active social pages. In these cases, we may collect your name, email address, phone number, and any personal data included in your message;
  5. when you submit a job application to work with us.

B) Photos depicting entertainers working within the hotel;

C) Browsing data. These are data transmitted through internet communication protocols, collected by hardware devices and software procedures supporting the website. These include IP addresses, domain names of users’ devices, information on visited pages, and other parameters relating to the user’s operating system and IT environment.

D) Cookies and other tracking systems. Technical cookies are used to ensure efficient website navigation, along with profiling cookies or other third-party cookies that may track your behavior. For more information, please refer to our cookie policy.

3. What are the legal bases and purposes of processing?

A) The personal data you voluntarily provide are collected and processed on the basis of pre-contractual measures and subsequent contractual obligations for the purpose of:

  1. Managing your booking at our facility, including through external services;
  2. Responding when you use the contact form on the website (email, phone, and active social pages);
  3. Replying to requests submitted through the Promo page form;
  4. Receiving feedback or suggestions about your experience;
  5. Activating the newsletter service upon your request.

Please note that without the required data in the contact form or newsletter subscription, we will not be able to respond or provide the requested service.

B) CVs and data received through the “Work With Us” page are processed pursuant to Article 111-bis of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, without requiring specific consent.
Please note that without the required data when submitting a contact form, application, or newsletter request, we will not be able to proceed with the requested processing.

C) Contact data (email address) are processed on the basis of the Controller’s legitimate interest to maintain relationships with existing customers by informing them about promotions, special offers, and/or events (soft spam).

D) Personal data voluntarily provided are also processed on the basis of consent for the purpose of:

  1. Publishing photos of employees or entertainers to promote activities and services offered by the facilities;
  2. Contacting you by phone, if you have already been a guest, made a booking, or provided your phone number, to inform you about promotions, special offers, events, or initiatives.

E) Personal data such as browsing data and technical cookies are processed on the basis of the Controller’s legitimate interest to ensure proper and efficient functioning of the website.

F) Personal data collected through profiling or marketing cookies are processed on the basis of consent given via the cookie banner. You may withdraw this consent at any time.

4. How long will the data be retained?

Personal data collected through messages sent via the website email addresses will be stored for up to 10 years. If you subscribe to our newsletter service, we will retain your email until you request cancellation of the service; while images of entertainers will remain published until the individual withdraws their consent, including under copyright law. Email contact data used for communications regarding promotions, offers, and events organized by the facility, exclusively for users who have already made a booking, been guests, or shown interest in our services, will be processed until you object (which you may do at any time using the contact details in this policy), and in any case for no longer than 36 months from the last interaction. Additionally, we will retain your phone number for promotional purposes for 24 months from your last interaction with us.

CVs submitted through applications will be stored for up to 3 years, after which only contact details will be retained to request an updated CV.

For cookie retention periods, please refer to the cookie policy.

5. Who is your data shared with?

Exclusively for the purposes outlined above, your data may be shared with:

DATA PROCESSORS: these are third parties who process data on our behalf and provide adequate security measures to protect your information. In particular, the following may process your data:

  • hosting providers with data centers located in the EU;
  • communication agencies managing the website.

AUTHORIZED PERSONNEL: employees or collaborators within our company who have been specifically appointed and trained to process data according to their roles.

DATA RECIPIENTS: entities that receive personal data from the Controller and act as independent controllers, including:

  • Facebook, Instagram, and other platforms. By clicking on social media icons, you will be redirected to external pages and agree to share some of your data, which will be governed by the respective platform’s privacy policy;
  • Facebook Messenger and WhatsApp. The same applies when you chat with us through these services; by doing so you agree to share some of your data with Facebook and/or WhatsApp and the information shared will be governed by the Social Network’s privacy policy.
  • Google Maps. When accessing it for directions to our facility, please note that you will be subject to Google’s privacy policies.
  • Ermes Hotels. An online booking service used to manage your reservation. By proceeding with the booking, you consent to the processing of your personal data.
  • Domains of other accommodation facilities, where you will find their respective privacy notices.