Why This Notice

This page describes how to manage the site with reference to the processing of personal data of users who consult it. Following consultation of this site, data relating to identified or identifiable persons may be processed. This is an information that is provided pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR 2016/679), to those who interact with the web services of for the protection of personal data, accessible electronically from the address:

The information is provided only for the CAV site. SOCRATE INCERTI & FIGLI S.R.L. and the Joint Data Controller G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C. and not for other websites that may be consulted by the user via links. The information is also based on Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of the directive n. 95/46 / EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that the data controllers must provide to users when they connect to web pages, regardless of the purpose of the link.

Type of data processed

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user

CAV. SOCRATE INCERTI & FIGLI S.R.L. and G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C. will process the personal data that the user will provide when registering, requesting a specific service or in any case as part of the relationship with the portal.

Such data may include:

  • identification and contact data (name, surname, residence / domicile address, city, VAT number, e-mail address, telephone number, etc.);
  • Data contained within the Curriculum Vitae (with any indications of Personal Data also belonging to particular categories pursuant to Article 9 of the GDPR, including belonging to protected categories or disability);
  • payment and billing data (data relating to credit cards and other payment systems used by the user)

The provision of personal data is a necessary requirement for the provision and consequent use of the requested Services. Failure to provide certain data (personal data, e-mail address, payment data and professional data etc.) therefore, could make it impossible for the Data Controller to provide the requested Services. CAV. SOCRATE INCERTI & FIGLI S.R.L. and G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E CSNC, will indicate from time to time, also through their forms on the portal, the data whose conferment is strictly necessary for the use of the Services and the additional data whose conferment is instead it is necessary only in order to enrich your user experience in the context of the Services themselves.

Owner, Data Processor and DPO The Data Controller is CAV. SOCRATE INCERTI & FIGLI S.R.L., in the person of the legal representative and the Joint Data Controller is G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C. The list of data processors is constantly updated and can be consulted at the company's registered office. A DPO has been appointed who can be contacted at

Purpose of the treatment they are intended for the data

The personal data you provide will be used for the following purposes:

    • execution of the contractual obligations assumed towards the customers and deriving from the booking operations in the hotels of the group.
    • sending communications concerning the services offered, newsletters and personalized news, containing material and promotional initiatives of their activities and services using traditional methods or automated methods (e-mail).
    • to consider an application submitted through the "Work with Us" section

Nature of the Contribution

The provision of data is mandatory with regard to the purpose in point a) c): any refusal will make it impossible for CAV. SOCRATE INCERTI & FIGLI S.R.L. and G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C. to proceed with the complete provision of the services offered. The provision of data is optional as regards the purpose referred to in point b): any refusal will only result in the failure to send commercial communications or newsletters without precluding other services.

Processing methods

All personal data are mainly processed through electronic tools and methods, however processing by paper means is not excluded a priori. The data will be stored in a form that allows the identification of data subjects only for the time strictly necessary to achieve the purposes for which the data were originally collected and, in any case, within the limits of the law. In order to ensure that personal data are always accurate, updated, complete and relevant, we invite users and other interested parties to keep their data updated through the specific functions of the sites and applications connected to the portal or to report any changes made to the following e-mail address: Personal data will be processed only for the time necessary in relation to the purposes described above. Security measures will be used to ensure the confidentiality of the data subject to whom these data refer and to avoid undue access to third parties or unauthorized personnel.

Place of data processing

The treatments connected to the web services of this site take place at the aforementioned CAV. SOCRATE INCERTI & FIGLI S.R.L. and G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C. and are only handled by specifically appointed personnel; the data are also processed in any other place where the parties involved in the processing are located. In particular, all the data relating to the website, as well as the relative security copies, are stored on servers hosted in data centers within the European Union and in compliance with current Community regulations. For further information, please contact the Data Controller.

Data processing times

The data is processed for the time necessary to perform the service requested by the user, or required by the purposes described in this document, and the user can always request the interruption of the processing or the cancellation of the data.

Disclosure of data to third parties

No data will be disseminated. Where communication to third party suppliers, consultants or partners should be necessary for needs related to the provision of the Services, the Data Controller will be responsible for appointing the latter as data processors pursuant to art. 28 of the Regulation, by virtue of the demonstrated ability, experience and reliability. Interested parties may request at any time the complete list of data processors appointed from time to time by CAV. SOCRATE INCERTI & FIGLI S.R.L. and G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.N.C., by sending a request to the Owner at the e-mail address It is understood that users' personal data may be freely disclosed to third parties, such as police forces or other public administrations, whenever this is permitted by law or required by an order or provision of a competent authority. These subjects will process the data as independent data controllers.

Rights of the interested party

At any time, you can exercise, pursuant to art. 15-22 of the GDPR 2016/679, the right to:

    • ask for confirmation of the existence or not of their personal data;
    • obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period; - obtain the correction and deletion of data;
    • obtain the limitation of the processing;
    • obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance;
    • oppose the processing at any time and also in the case of processing for direct marketing purposes;
    • oppose an automated decision-making process relating to natural persons, including profiling.

To assert the rights of the interested party and / or to request further information, you can contact the Data Controller, CAV. SOCRATE INCERTI & FIGLI S.r.l. (VAT number 01644160341, mail: or to the Joint Data Controller G&G HOTEL MANAGEMENT DI TESAURO GIOVANNI E C. S.n.c. (VAT number 02051170344, mail:, all with registered office and processing office in Via Reggio n. 51 / A - 43126 Parma (PR). Or you can send an email to the appointed DPO at