S1 Privacy Policy Statement – Information note pursuant to and for the purposes of Article 13 of the Italian Legislative Decree No 196 dated June, 30 2003

In compliance with the Italian Legislative Decree No 196 dated June 30, 2003 on Privacy Code, together with subsequent amendments and additions, we herewith provide you with the necessary information on the purposes and methods of the processing of your Personal Data. This Privacy Policy Statement applies only to our site and does not apply to other websites that the user may consult via links on the websites under the data controller’s domain name that shall not be held liable under any circumstances for websites of third parties.

This Privacy Policy Statement is provided pursuant to Article 13 of the Italian Legislative Decree No 196/2003 - Personal Data Protection Code.

The Privacy Policy Statement has also been based on the Recommendation No 2/2001 which was adopted on May 17, 2001 by the European Data Protection Authorities that convened as part of the Working Group under Article 29 of Directive No 95/46/EC. The purpose of this Recommendation was to identify certain minimum requirements for the on-line collection of personal data and, in particular, the methods, timescales and nature of the information the Data Controllers must provide to users when they visit web pages, regardless of the purpose of their visit, including the provisions provided for by Directive 2002/58/EC, and updated by Directive 2009/136/EC, on cookies.

1. THE "DATA CONTROLLER" is Villa D’Este SpA in the person of its pro-tempore legal representative, pursuant to Article 28 of the Italian Personal Data Protection Code.

THE “DATA PROCESSOR” is Carla Pagani c/o the Data Controller, pursuant to Article 29 of the Italian Personal Data Protection Code.


Personal identification data 

 ‘Personal data’ shall mean all information relating to a natural person, identified or identifiable, even indirectly, through reference to any other information, including a personal identification number. ‘Identification data’ shall mean  all of your personal information which permit direct identification of the Data Subject (e.g. first name, last name, date of birth, address, telephone number, email address etc.) . 

Browsing data

During their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user. 

These data are only used to obtain anonymous statistical information on the use of the website and to control its correct functioning. They are cancelled immediately after processing.

Legal Defence

The user’s Personal Data may be used by the owner of the website in a legal defence, or during the preparatory stages of potential proceedings, against any abuse by the user of the website or its connected services. The data may be used to ascertain responsibility in the event of any potential computer crimes against the site.


The User's Personal Data may be processed due to additional procedures and purposes linked to maintenance.

Data provided voluntarily by the user

The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated on this website and/or the completion of a data collection form entail the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as other personal data included in the email message.  

Specific information 

Specific information might be found in the web pages of this site relating to particular services or to the processing of the data provided by the user or by the party concerned.  

The software applications used to run this website can contain cookie technology. Cookies are mainly used to help users navigate their websites efficiently and perform certain functions. Cookies may provide information about website navigation and enable the provision of certain services that require the identification of the user path profile through the navigation pages. Regardless of whether or not cookies are present, whenever you have access to the portal, the type of browser (e.g. Internet Explorer, Netscape), the operating system (e.g. Macintosh, Windows), the host and URL of the visitor as well as the data on the requested page are recorded. Users may set their browsers to warn of the presence of cookies, allowing the users to decide whether to accept the cookie or disable it. More details about cookies can be found on the websites of each browser provider. 

Types of cookies

There are two types of cookies: session cookies and persistent cookies.  Session (transient) cookies are not saved to the hard drive and are deleted from the cache when the user closes the session. Persistent cookies are stored on a user's hard drive until they expire or are deleted. 

The cookies of the software applications used for this website are anonymous and cannot be traced back to the user’s Personal Data.  No use is made of cookies for the transmission of information of a personal nature nor is any type of so-called persistent cookie used, i.e. user-tracking systems. The use of these cookies (which are not saved persistently on a user’s computer and are automatically removed once the browser session is terminated) is strictly limited to the transmission of session identifiers (random numbers generated by the server) necessary to allow a safe and efficient website navigation.

Thanks to these session cookies our website can avoid using other information technologies which might jeopardise the user's confidentiality and the acquisition of the user's personal identification data.

First party cookies are only readable by the domain creating them. Third party cookies are created and readable by domains external to this website. The software, used for website and platform, creates a cookie to the user in order to generate usage statistics, for example through Google Analytics. The data generated by this cookie are stored at Google Inc.

For the operation of cookies by Google Analytics consult the official documentation provided by Google at the url:


The Personal Data you voluntarily provided by sending your CV and/or any personal and sensitive data in order to apply for a job at  Villa D’Este SpA shall be processed even by means of telecommunications and computer systems saved to a database.

With a view to selecting professional figures, Villa D’Este SpA requires the party concerned to provide any data useful to verify the suitability to take up work positions within the Company and to submit a spontaneous application. 

3. Purposes of Personal Data processing for which consent has been granted when requested (Article 23 of the Italian Legislative Decree No 196/03)

Personal Data and any other sensitive or judicial data spontaneously provided shall be treated by Villa D’Este SpA - unless the Data Subject objects to processing - exclusively for the purposes of: 

- recruiting staff, finalizing any contractual relationship, running training courses and internships, even at hotels other than the Data Controller’s premises;

-  formalizing the application for the purpose of a final selection;

- fulfilling specific obligations or requiring that these are fulfilled, as well as implementing specific tasks provided for by laws, regulations, collective agreements and the European Community legislation, in particular in order to comply with the legislation on social security and welfare, possibly supplementary, the Workplace Health and Safety Regulations, Public Safety, as well as to comply with tax matters, protection of health and public order; 

- safeguarding of the life or physical integrity of the party concerned or of a third party, even by means of pre-employment medical examination  in order to assess the applicant’s actual fitness for work, whenever health surveillance is a compulsory requirement for work or it has been requested by the employee “in pectore” (pursuant to Article 41, paragraph 1, letter b). No medical examination shall be carried out when not allowed by the legislation in force, and the same applies to all medical examinations provided for in Article 41, paragraph 2, of the Italian Legislative Decree No 81/2008;

The Data Controller reserves the right to remove Personal Data from its data files where these data, after checking, prove to be inaccurate, incomplete or no longer up-to-date. The Data Controller may also request the party concerned to communicate additional information necessary for recruitment procedures. Data processing and transmission may also include the category of sensitive and/or judicial data. If so, the party concerned will allow its use.

4. Processing methods and data retention

The processing shall be carried out automatically and/or manually, with methods and instruments that guarantee maximum security and confidentiality, carried out by authorised persons only in accordance with the provisions of Article 31 et seq. of the Italian Legislative Decree No 196/03. The data shall be retained for a period that does not exceed the purposes for which the data have been collected and subsequently processed.

5. Scope of data communication and dissemination 

Your Personal Data collected to be processed shall not be disseminated. However, they may be communicated to companies that are contractually bound to Villa D’Este SpA, within the European Union, in accordance with Article 42 of Legislative Decree No 196/2003. Personal Data may be transferred abroad to countries outside the EU, within the scope and within the limits imposed by Articles 43 and 44, letter b, of the Italian Legislative Decree No 196/2003 in order to comply with contractual obligations and related purposes. These data may be communicated to third parties that fall under the following categories:

- any third party and employment consultants for the purposes of personnel selection as part of support and consultancy relationships;

- entities that provide management services for the computer system and the telecommunications networks (including e-mails) used by Villa D’Este SpA

- competent authorities to comply with legal obligations and/or provisions from public bodies, as requested.

The third parties that fall under these categories shall perform the role of Data Processors or operate in complete autonomy as separate data controllers. The list of data processors is constantly updated and available from the head offices of Villa D’Este SpA.  Any further communication or dissemination shall be possible only after the explicit consent of the Data Subject. 

6. Nature of data provision and refusal. 

Apart from what has been specified for browsing data, the user shall be free to decide whether or not to provide Personal Data. The provision of such data is optional but necessary. If you refuse to provide the data required, we will not be able to perform closely related essential activities, such as providing you with any requested information/material or allowing you to benefit from the services of the Data Controller.


You may exercise your rights as expressed under Articles 7, 8, 9 and 10 of the Italian Legislative Decree No 196 dated June 30, 2003, by contacting the Data Controller, by calling our head offices at the following phone number +39-031-348.1 – Mrs. Carla Pagani, or by sending an e-mail to the following address: privacy@villadeste.it. You have the right to obtain confirmation at any time on the existence, or not, of your data and to know its contents and origin, to verify its accuracy or to request that it is supplemented, updated or corrected (Article 7 of the Italian Personal Data Protection Code). Pursuant to the same Article, you also have the right to request the cancellation, anonymisation or blocking of any data being processed illegally. You are also entitled to reject any processing of these data on legitimate grounds.

When contacting the Data Controller, please provide your e-mail address, name, address and/or telephone number(s) so your request can be handled correctly.

8.  Changes to this Privacy Policy Statement 

The Data Controller reserves the right to amend, update, supplement or remove parts of this Privacy Policy Statement at its own discretion and at any time. We encourage you to periodically review our Privacy Statement. For your convenience, when we post changes, we will revise the "last updated" date at the bottom of the statement. By using the website following the publication of any amendments, you agree to these changes.

Last update:  December 4th  2014  

The data controller is: Villa D’Este SpA, via Regina, 40 – 22012 - Cernobbio (CO) Italy in the person of its pro tempore legal representative; ­­­­­­

The data processor is: Carla Pagani c/o the Data Controller.

COOKIES POLICY - Extended statement

What are cookies?

Cookies are small text strings that the websites visited send to the devices, where they are stored and relayed once the user visits the website again.

Cookies may perform different functions and have got different features. Cookies can be used by Data Controller either by Third Parties.

Here below you'll find all the informations related to cookies used by the present website, together with the instructions which will help you to manage your cookies preferences.

For further informations about cookies please visit www.allaboutcookies.org; www.youronlinechoise.eu.

Cookies used by the present website

The use of cookies is included in privacy policy - general conditions issued by Data Controller, Villa D'Este SpA, with legal headquarter - registered office in Cernobbio - via Regina, 40 - Italy.  For Privacy Policy pursuant section 13 of Italian Data Protection Code click here.

Technical cookies that don't require user consent:

Cookies used in order to perform activities strictly necessary for the functioning of the present website and for the provision of the service: ASP.Net_SessionId

Statistics cookies used directly by Data Controller to collect personal informations in aggregate form: Google Analytics: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage - Opt Out

All technical cookies do not require user's consent, this is why they are install automatically following the user access to the website.

Cookies that require user's consent

All cookies different from technical cookies above mentioned are installed / activate only after user prior express consent to be released on the first visit on the website. The consent may be expressed in general manner, by interact with cookie banner, according to the different modality explained in the banner (e.g. by click on OK button or X banner; by continuing the visit on the website, by scrolling down or link); otherwise the consent may be supplied / not supplied in a selective way, following the modalities below. Your consent will track in occasion of different and future website visits. User have, in any case, the right to rovoke - at all or partially -  your expressed consent.

Third Part cookies:

Through this website we install Third Part cookies. Here below we supply you with some instructions and a link to Third Part privacy policy together with consent form. You can express your consent for the use of all the cookies by continuing to visit this website or by closing this pop-up.

Statistics Cookies:

We use Third Part Cookies to manage statistics, also in disaggregated form.

Here below you'll find the Third Parties names and for each cookie link to the Third Part page where you'll receive all the informations related to data processing and you'll have the possibility to express your consent.

Google Analytics: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage - Opt Out

Remember that you can manage your cookies preferences through browser setting

If you don't know type / version of your browser, please click on "help" button, in the up right corner of this window. Here you'll find all the necessary informations.

If you know the type/version of your browser please click on the correspondant link below to access the cookies managing page.

Internet Explorer

Google Chrome

Mozilla Firefox


For further informations please visit  www.youronlinechoices.eu.

Cernobbio, May 29th 2015