This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers duration: indefinite
Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google reCAPTCHA is a SPAM protection service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events, Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Trackers duration:
The iubenda Consent Database allows to store and retrieve records of Users’ consent to the processing of Personal Data, and information and preferences expressed in relation to the provided consent.
In order to do so, it makes use of a Tracker that temporarily stores pending information on the User’s device until it is processed by the API. The Tracker (a browser feature called localStorage) is at that point deleted.
Personal Data processed: Data communicated while using the service, IP address and Trackers.
Place of processing: Italy – Privacy Policy.
Trackers duration:
The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information, and in particular to the use of Cookies and other Trackers on this Website.
Personal Data processed: IP address and Trackers.
Place of processing: Italy – Privacy Policy.
Trackers duration:
Google Hosted Libraries is a traffic optimization and distribution service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
This Website uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.
Personal Data processed: city, country, email address, first name, last name and Tracker.
By registering or authenticating directly through this Website, Users allow this Website to identify them and give them access to dedicated services. The Owner may process Data collected when Users register or authenticate also for targeting and profiling purposes; to find out more, Users can contact the Owner using the contact details provided in this document.
Personal Data processed: billing address, budget, country, county, email address, first name, last name, password, phone number, Tracker, Usage Data, User ID and ZIP/Postal code.
WhatsApp is a message sending service.
Personal Data processed: country; Data communicated while using the service; email address; first name; last name; Tracker.
If you live in the European Region, WhatsApp Ireland Limited provides the services to you under this Privacy Policy.
If you don't live in the European Region, WhatsApp LLC provides the services to you under this Privacy Policy
Category of personal information collected according to CCPA: identifiers; internet information.
This Website uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
This Website uses popups to interact with the User to propose services and products which may be provided by third parties or that are unrelated to the product or services provided by this Website.
Personal Data processed: Email, name, Tracker and various types of Data.
Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
YouTube is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Trackers duration:
OpenStreetMap widget is a maps visualization service provided by OpenStreetMap Foundation that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: United Kingdom – Privacy Policy.
YouTube is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.
This widget is set up in a way that ensures that YouTube won't store information and cookies about Users on this Website unless they play the video.
Personal Data processed: Tracker, Universally unique identifier (UUID) and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Trackers duration:
Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
YouTube Data API is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate functions normally executed on YouTube so that Users can watch, find, and manage YouTube content directly on this Website.
Through this Service, this Website may collect Data directly or indirectly on or from Users’ devices, including by making use of Trackers. Users may restrict such access to their Data via the security settings page provided by Google. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document.
Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Trackers duration:
This Website uses Trackers to measure traffic and analyze User behavior to improve the Service.
Facebook Analytics for Apps is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.
Personal Data processed: Tracker, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Trackers duration:
Google Analytics on this Website makes use of a feature called User ID. This setup allows for a more accurate tracking of Users by associating that User with the same ID over various sessions and devices. It is set up in a way that doesn’t allow Google to personally identify an individual or permanently identify a particular device.
The User ID extension might make it possible to connect Data from Google Analytics with other Data about the User collected by this Website.
The opt-out link below will only opt you out for the device you are on, but not from tracking performed independently by the Owner. Contact the Owner via the email address provided in this privacy policy to object to the aforementioned tracking as well.
Personal Data processed: Tracker.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Google Analytics on this Website has Advertising Reporting Features activated, which collects additional information from the DoubleClick cookie (web activity) and from device advertising IDs (app activity). It allows the Owner to analyze specific behavior and interests Data (traffic Data and Users' ads interaction Data) and, if enabled, demographic Data (information about the age and gender).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Tracker, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example) and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Tracker and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out.
Trackers duration:
Google Analytics on this Website has granular data collection activated which collects location and device data on a per-region basis. It allows the Owner to create and analyze User reports that rely on those metrics.
Personal Data processed: browser information, city, device information, number of Users, session statistics, Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google Analytics 4 is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: number of Users, session statistics, Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
This Website uses Trackers to deliver personalized ads or marketing content, and to measure their performance.
This Website uses User Data to propose services or products provided by third parties, related or unrelated to the product or service provided by this Website.
Direct Advertising may involve the use of Trackers to monitor Users’ behavior and serve personalized ads. Users may opt-out of ad personalization by visiting their device settings or following the instructions provided by YourOnlineChoices and AdChoices.
Besides applicable device settings, the User may also make use of the rights described under User rights in the relevant section of this privacy policy.
Personal Data processed: device information, Tracker, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example), Universally unique identifier (UUID) and Usage Data.
Mailchimp is an email address management and message sending service provided by Intuit Inc.
Personal Data processed: country, Data communicated while using the service, email address, first name, last name and Tracker.
Place of processing: United States – Privacy Policy.
Meta Lookalike Audience is an advertising and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that uses Data collected through Meta's Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the basis of their past use of this Website or engagement with relevant content across Meta's apps and services.
On the basis of these Data, personalized ads will be shown to Users suggested by Meta Lookalike Audience.
Users can opt out of Meta's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Trackers duration:
Similar audiences is an advertising and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that uses Data from Google Ads Remarketing in order to display ads to Users with similar behavior to Users who are already on the remarketing list due to their past use of this Website.
On the basis of this Data, personalized ads will be shown to Users suggested by Google Ads Similar audiences.
Users who don't want to be included in Similar audiences can opt out and disable the use of advertising Trackers by going to: Google Ad Settings.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
Google Ads conversion tracking is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Google Ads advertising network with actions performed on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Trackers duration:
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Trackers duration:
Google Floodlight conversion tracking (Floodlight tag) is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects Data from the Google advertising services (i.e. Search Ads 360 and Campaign Manager 360) with actions performed on this Website. Depending on the setup of the service, such Data might also be used for retargeting purposes.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects the activity of this Website with the Meta Audience Network.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
This Website uses Google Signals, a feature of Google Analytics, which will associate the visitation information that it collects from this Website with Google information from accounts of signed-in Google-account users who have consented to this association for the purpose of ads personalization. This Google information may include User location, search history, YouTube history and Data from sites that partner with Google – and is used to provide aggregated and anonymized insights into Users' cross device behaviors.
If a User falls under the described association, they may access and/or delete such Data via My Activity provided by Google.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Meta Custom Audience is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects the activity of this Website with the Meta Audience Network.
Users can opt out of Meta's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: email address and Tracker.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Trackers duration:
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects the tracking activity performed by Google Analytics and its Trackers with the Google Ads advertising network and the Doubleclick Cookie.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
In order to understand Google's use of Data, consult Google's partner policy.
Users can opt out of Google's use of Trackers for ads personalization by visiting Google's Ads Settings.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Trackers duration:
1. What information about guests do we collect?
Società Amministrazione Gestione Alberghi – S.A.G.A. S.p.A collects personal data about its guests such as, but not limited to: personal and contact details (such as name and surname, date of birth, tax registration number, passport number or other identity document presented at check-in, email address, home address, mobile phone number); payment details (including credit card numbers, billing addresses, VAT number, and bank account information); demographic information (such as age, gender, country, and preferred language); information related to reservation, stay, or visit at the hotel (such as the start and end dates of the stay, services requested, complaints, whether you have pets etc.); information to fulfill special requests and/or specific accommodations; information about guests’ interests and preferences (for operational efficiency purposes and to provide excellent service during the stay); information collected through the use of closed circuit television systems, key cards and other security systems; photographs and video footage showing the individual and relating to their entry into and movements within certain rooms and areas of the hotel, as well as in the vicinity of the hotel’s entrances;
information relating to any allergies or dietary requirements, disability status or religious beliefs (e.g. requests for items of religious significance). This information falls within the special categories referred to in Article 9 of the GDPR and is processed by the Data Controller only with the guest’s explicit consent and solely for the purpose of providing the requested services
This information is provided directly by the guest when staying at the property, obtained by S.A.G.A. S.p.A.., or acquired through closed circuit television systems, key cards and other security systems on company premises.
2. How do we use guests’ data?
As a data controller, S.A.G.A. S.p.A. collects and processes guests’ personal information for the following purposes:
provide the requested services and manage the stay at the hotel, fulfill all obligations under the contractual relationship and meet guests’ specific requests and needs during their stay. For these purposes,the processing of personal data is carried out as it is necessary for the provision of the requested services. For these purposes, the provision of personal data is optional, but is a necessary requirement for accessing the services offered by the Data Controller; failure to provide such data will prevent the provision of the requested services. Again for these purposes, the processing of the special categories of personal data indicated above(relating to health or religious beliefs) is carried out only subject to the guest’s explicit consent, which may be given by ticking the appropriate box at the end of this policy and which may be withdrawn at any time by contacting the details provided in this Policy. The provision of personal data relating to health or religious beliefs and consent to their processing are also optional, but are a necessary requirement for the Data Controller to be able to offer the requested service or meet certain needs. Should the guest prefer not to consent to or provide such personal data, requests involving the use of such information cannot be met by the Data Controller
carry out all activities relating to the provision of the requested services, or inherent to such provision, as required by laws, regulations and rules, including the fulfilment of accounting and tax obligations, the obligation to report the personal details of guests staying at the Hotel Caesar Augustus to the Police Headquarters, and any other obligations incumbent upon the Data Controller. For these purposes, data processing is carried out as it is necessary to comply with the legal and regulatory obligations incumbent upon the Data Controller (e.g. regarding the invoicing of fees, statistical analysis and public order). Consequently, for these purposes, the provision of the guest’s personal data is a necessary requirement for using the services offered by the Data Controller; failure to provide such data will impair the Data Controller’s ability to meet the obligations imposed by laws and regulations, and may result in the inability to access the requested hotel services.
offer a personalised service and speed up check-in procedures for future stays, subject to the retention of personal details, identity document details, preference details and payment details; and to forward telephone calls and messages received from the guest at the Hotel Caesar Augustus, subject to notifying any persons who contact the Data Controller requesting this of the guest’s presence at the hotel. For these purposes, processing is carried out only with the guest’s explicit consent, which may be given separately by ticking the appropriate boxes at the end of this policy and which may be withdrawn at any time by contacting the Contact Details. Should the guest prefer not to consent or not to provide their data,this will not affect their use of the service in any way, save only that the Data Controller will be unable to forward calls or messages received at the Hotel Caesar Augustus to them and that, during future stays, their data will need to be collected again as part of the registration procedure.
protect the rights and claims of the data controller in any potential disputes, including in pre-litigation, judicial and arbitration proceedings, as well as in the event of any fraud. For this purpose, data processing is carried out to the extent necessary to pursue the Data Controller’s legitimate interest in safeguarding its rights and interests in the event of disputes arising or attempts at fraud being detected, as well as to establish, defend or exercise the Data Controller’s rights in court, in arbitration proceedings and in pre-litigation proceedings.
safeguard, through the video surveillance system installed at the Hotel Caesar Augustus, the safety of guests, staff and the company’s physical and information assets against acts of violence, theft, robbery, damage and other unlawful acts; to identify any perpetrators; and to safeguard the data controller’s rights of defence in legal proceedings. These processing operations are carried out because they are necessary for the pursuit of the Data Controller’s legitimate interests. For these purposes, the provision of personal data is optional; however, given the location and operating mechanism of the systems, should a guest decide not to provide their personal data, they will not be able to access the Data Controller’s premises.
send, after adding the guest’s email address to the dedicated mailing list, informational and promotional communications relating to the services offered by the Data Controller, using your contact details. These operations are carried out only with the guest’s explicit consent, which may be given by ticking the relevant box in the relevant forms and which may be withdrawn at any time using the relevant function at the bottom of every email received or by contacting the Contact Details. For the purposes set out above, consent to processing is entirely optional; should the guest prefer not to give consent, they will not suffer any prejudice or repercussions regarding the use of the services offered by the Data Controller.
gather information on guests’ satisfaction with the performance and quality of the services provided by S.A.G.A. S.p.A. The legal basis for the processing of data is the guest’s consent, given by voluntarily completing the questionnaire. The provision of personal data, through the completion of the questionnaire, is optional.
3.Do we share the information we receive with third parties?
Guests’ personal information may be shared with the following parties, as reasonably necessary for the purposes and on the legal basis set forth in this notice: (i) when applicable laws and regulations require disclosure to legitimate third party recipients of such communications, such as public authorities and agencies for their respective institutional purposes, including law enforcement agencies (for example, to the Questura with territorial jurisdiction pursuant to Article 109 of T.U.L.P.S., via the dedicated online portal); (ii) with service providers, e.g. for services of a technical and organizational nature that are instrumental to the achievement of the purposes indicated above as independent contractors, also in associated form - e.g. for payment management, companies specialized in data processing, etc.; (iii) with employees and contractors of S.A.G.A. S.p.A., where necessary for the provision of services; (iv) with lawyers and legal, tax and technical advisers, arbitration tribunals and judicial authorities, where this is necessary to obtain assistance in establishing, exercising or defending a right or interest of the Data Controller, or to contest claims made by third parties.
S.A.G.A. S.p.A. will enter into specific contracts with those recipients, from among those listed above, who receive your personal data so that they may process it on its behalf (“ Data Processors”) to ensure that the operations carried out are performed in strict compliance with the instructions provided by the Data Controller and that appropriate technical and organisational measures are implemented to safeguard the security of your personal data.
4. Do we transfer guests’ information outside the European Economic Area?
The disclosure of guests' personal data to the categories of recipients indicated above may require the transfer of such data to countries outside the European Economic Area. In such cases, S.A.G.A. S.p.A. will provide the appropriate supplementary information and will transfer personal data only to third countries whose level of personal data protection has been deemed adequate by the European Commission, or upon providing appropriate safeguards, including recourse to standard contractual clauses.
5. How long will we retain guests’ data?
Personal data processed for the purposes set out above will be retained for the entire duration of the processing described therein; thereafter, personal data will be retained for the time strictly necessary to comply with statutory accounting and tax obligations and to protect the Data Controller against potential legal claims and/or to exercise legal rights and claims. Exceptions to this rule are: (i) data falling within the so-called special categories, which will be deleted as soon as the stay is concluded; (ii) data processed for the purpose of offering a personalised service and speeding up check-in procedures during the guest’s subsequent stays, and of sending the guest, by email, informational and promotional communications relating to the services offered by the Data Controller; such data will no longer be used for these purposes if the guest withdraws their consent, and in any event 24 months after the date on which consent was given;(iii) images of guests captured by the video surveillance system are retained for 24 hours from the time of recording, after which they are automatically overwritten unless there are special requirements for further retention in connection with public holidays or the closure of the premises, requests from law enforcement agencies or the judicial authorities, or following the detection or reporting of damage to property, theft or other unlawful acts.
6. What can I do if I have any questions or concerns or want to access my personal data?
Your main rights under the European Union General Data Protection Regulation are: (a) the right to access; (b) the right to rectification; (c) the right to erasure; (d) the right to restrict processing; (e) the right to object to processing; (f) the right to data portability; (g) the right to lodge a complaint with a supervisory authority (Garante per la Protezione dei Dati Personali, Piazza Venezia, 11 - 00187 Roma (RM), Italia (IT), Email: garante@gpdp.it, Certified mail: protocollo@pec.gpdp.it); and (h) the right to withdraw consent. Guests may exercise any of these rights by contacting the following contact details by email or by registered post: SOCIETA’ AMMINISTRAZIONE GESTIONE ALBERGHI – SAGA S.P.A., Corso Vittorio Emanuele II n. 37/B – 20122 Milano (MI); e-mail: info@caesar-augustus.com
Users can set or update their preferences via the relevant privacy choices panel available on this Website.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
Users may use their own browser settings to:
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Caesar Augustus
Soc. Amm.ne Gestione Alberghi S.p.A.
P.IVA IT03567240639 - C.F. 00944330588
CUSR: 15063004ALB0020
Via G.Orlandi, 4
80071 Anacapri, Napoli - Italy
Owner contact email: info@caesar-augustus.com
Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.
Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
The natural person to whom the Personal Data refers.
The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.
The means by which the Personal Data of the User is collected and processed.
The service provided by this Website as described in the relative terms (if available) and on this site/application.
Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.
Cookies are Trackers consisting of small sets of data stored in the User's browser.
Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User’s device.
Provides access to the User's primary email address.
This policy has been prepared based on provisions of multiple legislations.
This policy relates solely to this Website, if not stated otherwise within this document.
Latest update: March 30, 2026
Version: 26
This document has been created with the iubenda Privacy and Cookie Policy Generator. See also the Terms and Conditions Generator. iubenda hosts this content and only collects the Personal Data strictly necessary for it to be provided.
Show the complete Privacy Policy