Privacy Policy

1. Legal Information for Navona Palace Collection

2. Privacy Policy

This privacy policy applies to our website, online bookings, and online voucher purchases. Any personal information you provide will be treated with appropriate security and confidentiality standards and in compliance with the General Data Protection Regulation 2016/679 (GDPR) and relevant national legislation.

On what legal basis do we collect and process your information?
       
  • When you make an online booking or purchase an online voucher, we collect information about you and process it on the basis of our contractual commitment to perform these services.
  •    
  • Any information not required to complete the online booking or voucher purchase will be collected and processed based on your consent. Your explicit consent is required, and you have the right to choose whether or not to provide such information. For example, we may add you to our mailing list if you opt in.
Secure Online Booking
       
  • When you make an online booking, you are redirected to the booking engine provided by our partner, Bookassist. All information is transmitted securely and protected from disclosure to third parties. Bookassist is certified and compliant with PCI DSS (Payment Card Industry Data Security Standards). Bookassist's security and privacy policy can be viewed here: [https://www.bookassist.com/global/security.jsp](https://www.bookassist.com/global/security.jsp)
Why do we collect information?
       
  • Information is collected to facilitate the online booking process, enable online voucher purchases, offer additional services where consent is granted, and improve the user experience for future visits.
  •    
  • If you subscribe to our newsletter, your information will be collected to keep you updated on news and special offers.
What type of information do we collect and what are your rights?
       
  • To complete the online booking process, we require all information marked with an asterisk, including your name, address, phone number, and payment details.
  •    
  • You have the right to request access to any personal data we hold about you.
  •    
  • You have the right to request the correction of any inaccurate data we hold about you.
  •    
  • You have the right to request the erasure of your personal data; please note that deleting certain data may affect our ability to provide our services.
  •    
  • You have the right to data portability, meaning you can request to receive your data in a structured, commonly used format.
  •    
  • Where processing is based on consent, you have the right to withdraw your consent at any time. For instance, you can unsubscribe from our mailing list at any time by clicking the unsubscribe link at the bottom of our emails.
  •    
  • You have the right to lodge a complaint with the relevant supervisory authority.
How long do we retain your data?
       
  • We retain your personal data for as long as necessary to fulfill the purposes for which it was originally collected or subsequently legally processed. Criteria used to determine data retention periods include:
  •    
             
    • the nature and type of personal information provided;
    •        
    • the purpose for which the personal information was provided; and
    •        
    • necessary operational requirements to continue providing requested services or features.
    •    
       
  • We may retain your information for a longer period if required by law.
What to do if you have questions or wish to exercise your rights?
       
  • You may contact our Data Protection Representative using the contact details listed above.
  •    
  • In particular, if you believe our website or system has collected inaccurate information or if you wish to dispute any data, please do not hesitate to contact us.
Minors' Privacy and Parental Consent

Please note that this website is not intended for or designed to be used by individuals under the age of 18. Consequently, minors under 18 should not use this website. Our Privacy Policy prohibits accepting users under 18 years old. We specifically request that persons under 18 do not use this site or submit any data. If we inadvertently receive information from a minor under 18, we will not knowingly disclose this data to any third party for any purpose, and any subsequent disclosure would be solely due to the minor having used the website without our solicitation or permission.

Links to External Websites

We may provide links to third-party websites that we believe offer useful information and services. However, these sites may not operate under the same privacy standards. We are not responsible for the privacy policies or actions of third parties, including website owners whose sites are accessible through ours. We encourage you to review the privacy policies of any third-party sites before submitting personal or sensitive data.

3. Cookie Policy

This policy outlines how we use cookies on our website. To ensure proper functionality, we may place small data files known as cookies on your device. These cookies help us enhance the website and provide you with a more personalized service.

What are cookies?

Cookies are small text files downloaded to your device when you visit a website. They are sent back to the originating website on subsequent visits, or to another website that recognizes the cookie. Cookies allow a website to recognize a user's device and remember preferences (such as login details, language, font size, and display settings) over time, eliminating the need to re-enter information during return visits or browsing sessions. Different types of cookies serve various functions, such as session tracking, user identification, or behavioral online advertising.

What types of cookies do we use?
Strictly Necessary Cookies

Essential for basic website navigation and core features. We use these cookies to deliver services you have explicitly requested.

Performance Cookies

Collect anonymous information about how visitors use the website, such as most-visited pages, helping us optimize user experience.

Functionality Cookies

Allow the website to remember choices you make (such as username, language, or region) to provide enhanced and personalized features.

Advertising / Targeting Cookies

Used to deliver advertisements relevant to your interests by tracking browsing habits across websites. They are often linked to site functionality provided by third parties.

Personalized Advertising

With cookies enabled, we and third-party vendors (including Google) may display targeted advertisements for our website across the internet based on your prior visits.

Third-Party Cookies

Set by external domains other than the website you are directly visiting (e.g., embedded tools, analytics, or social media plugins).

Which cookies are used on this website?

The following cookies are used on our site. To opt out, please see the section below titled "How can I withdraw consent for cookie collection?":

Bookassist Cookies:

Bookassist Session Cookie: Strictly necessary cookie, essential for service function and user session maintenance. Managed by Bookassist; expires when the browser session ends.

Bookassist Conversion Tracking Cookie: Performance cookie, essential for tracking conversion statistics. Managed by Bookassist; expires after 1 year.

Bookassist Booking Reference Cookie: Functionality cookie, non-essential, saves user booking preferences. Managed by Bookassist; expires after 1 year.

Bookassist Cookie Policy Cookie: Functionality cookie, essential for displaying the cookie policy on initial visit. Managed by Bookassist; expires after 1 year.

Bookassist Home Popup and Abandon Popup Cookies: Functionality cookies, essential for managing popup display behavior. Managed by Bookassist; expire when the session ends.

Bookassist newcms Cookie: Functionality cookie, essential for saving user preferences. Managed by Bookassist; expires when the session ends.

Bookassist CMS Cookie: Functionality cookie, essential for maintaining the hotel website session and user preferences (e.g., language). Managed by Bookassist; expires after 1 year.

Google Cookies:

Third-party cookies managed by Google and accessible to both Bookassist and the hotel. For details, visit: [https://policies.google.com/technologies/cookies](https://policies.google.com/technologies/cookies)

Google Analytics: Third-party performance cookie used to gather anonymous website usage statistics. More details: [https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage](https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage)

Google Remarketing: Third-party targeting cookie used to serve relevant advertisements based on user interests.

Google AdWords: Third-party performance cookie used to measure advertising effectiveness and conversion metrics.

Other Third-Party Cookies:

Facebook, Twitter, and Google+: Social sharing cookies managed directly by these platforms.

Vimeo and YouTube: Third-party media cookies used to embed and playback video content.

A full detailed list of cookies used by Bookassist is available at: [https://bookassist.org/cookieslist/](https://bookassist.org/cookieslist/)

Will cookies be used for other purposes?

Cookies will not be used for any purpose other than those stated above. However, this policy may be updated over time. Please review the latest policy version periodically when accessing our services.

How can I withdraw consent for cookie collection?

You can manage and/or delete cookies at any time via your browser settings. For instructions, visit www.aboutcookies.org.

You can clear existing cookies and set most browsers to prevent new ones from being saved. Note that blocking essential cookies may restrict site functionality, including the ability to complete online bookings.

To specifically opt out of Google Analytics, visit: [https://tools.google.com/dlpage/gaoptout/](https://tools.google.com/dlpage/gaoptout/)

To opt out of interest-based advertising, visit the Network Advertising Initiative: [http://www.networkadvertising.org/choices/](http://www.networkadvertising.org/choices/)

Your Right to Privacy

We respect your privacy rights. All personal data submitted through this website is processed securely and in accordance with GDPR 2016/679 and applicable national laws.

To request access to, correct, or delete your personal data, please contact us using the information in Section 1.

Policy Updates

We reserve the right to modify this policy at any time. Updates will be posted directly to this page.