Privacy Policy

The data controller is AV CLUB SRL, the company that operates AV Isola Verde Hotel & Thermal Spa, Via Michele Mazzella 41, 80077 Ischia (NA), Italy.

• Registered office: Via Montetignuso 48, 80077 Ischia (NA), Italy
• VAT no. IT10209551216
• Email: info@isolaverdehotel.it
• Certified email (PEC): avclub@pec.it

Depending on how you interact with us, we process the following categories of data:

• Browsing data: IP address, browser and device type, pages visited, date and time of access, collected automatically by the systems that run the website.
• Data you provide when you contact us by email, phone or WhatsApp: name, contact details and the content of your request.
• Booking data: name, contact details, dates of stay, number of guests, any special requests and payment details, collected through the booking engine.
• Stay data: personal and identity document details of each guest, which the law requires us to collect at check-in.
• Health data, only where necessary for the service you request: for example food allergies or intolerances you tell us about, or the medical prescription for thermal treatments covered by the Italian National Health Service.

• To answer your requests for information and quotes: pre-contractual measures (Art. 6(1)(b) GDPR).
• To manage your booking and stay, including restaurant and thermal spa services: performance of a contract (Art. 6(1)(b) GDPR).
• To comply with legal obligations: reporting guests' details to the Public Security Authority (Art. 109 TULPS), tourist tax, tourism statistics, tax and accounting obligations (Art. 6(1)(c) GDPR).
• To process health data solely to provide the service you request, with your explicit consent or for healthcare purposes (Art. 9(2)(a) and (h) GDPR).
• To analyse website use in aggregate form in order to improve it, using third-party statistics tools: with your consent, where required (Art. 6(1)(a) GDPR).
• To protect the controller's rights in the event of disputes: legitimate interest (Art. 6(1)(f) GDPR).

Providing the data needed for the booking and the data required by law at check-in is mandatory: without it we cannot confirm your booking or host you. Providing any other data is optional.

The website uses technical cookies, which are necessary for it to work, and third-party tools managed through Google Tag Manager that may set statistics cookies. Non-technical cookies are only used with your consent, given through the cookie banner (Cookiebot), which you can change or withdraw at any time by reopening the banner; you can also manage or delete cookies in your browser settings.

The website uses the following external services:

• Cookiebot (Usercentrics A/S), to collect and record your cookie preferences.
• Google Tag Manager and Google statistics tools (Google Ireland Ltd.), to measure website visits in aggregate form.
• Google Fonts (Google Ireland Ltd.), to display typefaces: your browser connects to Google's servers, which receive your IP address.
• SimpleBooking, the online booking engine: when you book you are redirected to its website, where data is collected on behalf of the hotel to manage the booking.
• WhatsApp (WhatsApp Ireland Ltd.), if you choose to contact us through this channel; WhatsApp's own privacy policy also applies.
• Instagram and Facebook (Meta Platforms Ireland Ltd.): the links to our profiles lead to external websites with their own privacy policies.

Data is processed with electronic and paper-based tools, using security measures suitable to prevent loss, unlawful use and unauthorised access. We keep it for the following periods:

• Information requests: for as long as needed to reply, and in any case no longer than 12 months if no booking follows.
• Booking and stay data: for the duration of the relationship and, for tax and accounting obligations, for 10 years (Art. 2220 of the Italian Civil Code).
• Health data: only for as long as strictly necessary to provide the service and to meet obligations towards the National Health Service.
• Browsing and statistics data: for as long as needed for statistical purposes, according to each provider's settings.

Data is never published or sold. It may be shared with:

• hotel staff authorised and trained to process it;
• providers that support us in running the hotel and the website (property management system, booking engine, hosting, IT services), appointed as data processors;
• tax and legal advisers, banks and payment institutions, for the tasks within their remit;
• public authorities (police, municipality, local health authority, tax agency) where required by law.

Some providers, such as Google and Meta, may also process data in the United States. In these cases the transfer is based on the European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

You can exercise the rights set out in Articles 15-22 GDPR at any time by writing to info@isolaverdehotel.it or to the certified email address avclub@pec.it. In particular you can request:

• access to your data and a copy of it;
• rectification of inaccurate or incomplete data;
• erasure of your data, unless the law requires us to keep it;
• restriction of processing;
• portability of the data you have provided;
• to object to processing based on legitimate interest;
• to withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

We may update this notice, for example following changes in the law or in the services we offer. The current version is always published on this page, with the date of the last update.