Privacy policy

pursuant to art. 13 of Italian Legislative Decree No. 196/2003

Dear guest,
Pursuant to Italian Legislative Decree No. 196 dated 30 June 2003 “Personal Data Protection Code”, LEFAY RESORTS S.r.l. as the DATA CONTROLLER, with registered office in Via Feltrinelli, 136, Gargnano (VAT Registration No. 02786260980), would like to provide you with information regarding the use of the personal data, which may also be of an identification nature supplied by you in order to book your wellness holiday at our facilities.
According to the legislation indicated, your data will be processed in accordance with the principles of correctness, lawfulness, transparency and protection of confidentiality.
We would like to remind you that the processing of personal data means any operation concerning the collection, recording, organisation, retention, consultation, processing, alteration, selection, retrieval, comparison, utilization, interconnection, blocking, communication, deletion, destruction or a combination of two or more of such operations.
In accordance with article 13 of Italian Legislative Decree No. 196/2003, we therefore inform you that:
1. The personal data, even of an identification nature provided by you, will be processed for requirements related to managing your booking; by way of example, we inform you that the data may be processed:

  • to enter data in the company’s computer databases and/or physical archives;
  • to manage hotel services;
  • to manage payments;
  • to manage promotions and offers;
  • to meet every other contractual and/or legal obligation;
  • for statistical purposes associated with the Internet website’s functions.

2. For the purposes stated in point 1) the data provided by you may be processed by paper, electronic and/or magnetic means.
3. We inform you that providing the data identified with an asterisk in the booking request form is necessary and compulsory.
Whereas, providing the data not identified with an asterisk in the booking request form is not a compulsory requirement, but the absence of such data could prevent us from providing some reception services.
4. Your refusal to provide the compulsory data prevents the booking procedure from being completed at our facility.
We take this opportunity to point out that providing the data to LEFAY RESORTS S.r.l. in order to book the stay entails the automatic authorisation to process the data for the purposes detailed in point 1) and to fulfil the legal obligations, pursuant to article 24 of Italian Legislative Decree No. 196/03.
5. The personal data, even of an identification nature, provided by you will not be disseminated, but may be communicated or become known to members of the company’s workforce as persons in charge of data processing or data processors and/or external parties working with the company as data processors or independent data controllers, for example:

  • booking services management companies;
  • banking and credit institutions to manage payments;
  • banking and credit institutions to manage payments;

6. We inform you that you may exercise your rights with respect to LEFAY RESORTS S.r.l. (DATA CONTROLLER) at any time, in accordance with art. 7 of Italian Legislative Decree No. 196/2003, the text of which is provided in full in an appendix to this information notice for your ready reference.
7. LEFAY RESORTS S.r.l. has appointed the temporary manager of the operational structure as the person responsible for responding to data subjects who can be contacted at the company’s operating office in Via Feltrinelli, 136 Gargnano (BS) ITALY, and/or by telephone at the number (+39) 0365/441760 and/or at the following e-mail address:
The updated list of persons appointed as data processors is available at the company’s operating office.
8. Subject to your express authorisation the data controller may process the data you have provided to send to your domicile address/place of residence or to your e-mail address information material concerning offers and promotions proposed by LEFAY RESORTS S.r.l. or events organised together with LEFAY RESORTS S.r.l.
Also in this case the data provided by you will be processed as outlined in this information notice.

We take this opportunity to advise you that providing data for the purposes outlined in this point is not a compulsory requirement and there are no consequences regarding your booking, if you decide not to authorise such data processing.

Yours sincerely


*This information notice integrates and completes elements already known to the data subject.

Italian Legislative Decree no.196/2003,
Art. 7 – Right of access to personal data and other rights

1. The data subject has the right to receive confirmation of the existence or otherwise of personal data concerning himself/herself, even if not yet registered, and their communication in intelligible form.
2. The data subject has the right to be informed regarding:
a) the source of the personal data,
b) the purposes and methods of the processing;
c) the logic applied in the case of processing carried out with the assistance of electronic tools;
d) the identification details of the controller, data supervisor and person appointed in accordance with article 5, paragraph 2;
e) the parties or categories of parties to whom the personal data may be communicated or who may have knowledge of it in their capacity as appointed national representatives, supervisors or authorized persons.
3. The data subject has the right to obtain:
a) the updating, rectification, or, if necessary, integration of the data;
b) the cancellation, the transformation into anonymous form or the blockage of the data processed in breach of the law, including the data whose retention is not necessary in relation to the purposes for which they were collected or subsequently processed;
c) the certification that the operations stated in letters a) and b) have been notified, even with regard to their content, to those to whom the data were communicated or disseminated, except in the case in which such requirement proves impossible or involves a manifestly disproportionate effort compared with the right protected.
4. The data subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of his/her personal data, even though they are relevant to the purpose of the collection;
b) to the processing of his/her personal data, where it is for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication surveys.

Additional information in relation to the Privacy Policy of Lefay Resorts
The information notice is also based on Recommendation No. 2/2001 that the European Authorities for the protection of personal data, associated in the Group established under Article 29 of Directive No. 95/46/EC, adopted on 17th May 2001 in order to identify some minimum requirements for the online collection of personal data, and, in particular, the methods, timing and the nature of the information that the data controllers must give users when the users connect to webpages, regardless of the purposes of such connection, as well as the requirements envisaged under Directive 2002/58/EC, as updated by Directive 2009/136/EC, in relation to Cookies.

Type of data collected by the Internet website
The Personal Data collected by this Application, autonomously or via third parties include: Cookies and usage data.
Other Personal Data collected could be indicated in other sections of this privacy policy or via information texts displayed at the same time the Data are collected.
The Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application.
The possible use of Cookies – or other tracking tools – by this Application or by the data controllers of third-party services which this Application uses, if not otherwise specified, has the purpose of identifying the User and recording the respective preferences strictly for purposes associated with providing the service requested by the User.
If the User does not provide some Personal Data this circumstance could prevent this Application from providing its services.
The User assumes responsibility for the Personal Data of third parties which are published or shared by means of this Application and warrants that he/she is entitled to communicate or disclose such Personal Data, thereby releasing the Data Controller of any liability towards third parties.

The Data are processed for the time required to perform the service requested by the User, or required by the purposes described in this document, and the User can always request the Data Processing to be interrupted or the Data to be deleted.
This Application uses Cookies. The Cookie Policy detailed below may be consulted for additional and detailed information:

Purposes of Processing the Data collected
In addition to the purposes indicated in the information notice outlined above the User’s data are also collected for the following purposes: Statistical.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Details on the processing of Personal Data
The Personal Data are collected for the following purposes and by using the following services:
Statistical (pulldown menu)

Cookie Policy
This Application uses Cookies. The Cookie Policy may be consulted for additional and detailed information.

Further information on data processing
Defence in legal proceedings
The User’s Personal Data may be used in the Data Controller’s defence in legal proceedings or in the preparatory phases to establish a possible defence, against the abusive use thereof or of the associated services by the User.
The User declares he/she is aware that the Data Controller could be requested to disclose the Data at the request of Public Authorities.
Specific information
In addition to the information contained in this privacy policy, at the User’s request this Application could provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.
System log and maintenance
This Application and the possible third-party services used by the Application could collect a system Log, namely, files which record the interactions and which may also contain Personal Data, for example the User’s IP address, tor needs associated with its operation and maintenance.
Information not included in this policy
Additional information in relation to the processing of Personal Data may be requested at any time from the Data Controller by using the contact information.
This Application does not support ‘Do Not Track’ requests. Please consult the respective privacy policies to verify if any third-party services used do support such requests.
Amendments to this privacy policy
The Data Controller reserves the right to amend this privacy policy at any time by notifying Users on this page. Therefore, Users are invited to consult this page frequently, using as a reference the date of the last amendment indicated at the foot of the page. If a User does not accept the amendments made to this privacy policy, then the User is required to stop using this Application and may request the Data Controller to remove the User’s Personal Data. The previous privacy policy shall continue to be applied to the Personal Data collected up to that date, unless otherwise specified.

Last amendment made on 22nd June 2015


I commenti sono chiusi.