Privacy policy

Welcome to the website 1dest.com of 1Dest by Nest Srl (hereinafter referred to as "'1Dest'')."Website").

With this Privacy Policy, 1Dest by Nest Srl provides the user with information on the processing of personal data - pursuant to EU Regulation 2016/679 (hereinafter "Regulation") - which are collected automatically or which he provides voluntarily, by accessing and navigating the Site, as well as by using the services provided therein.

Browsing is free and does not require any registration; the provision of personal data is foreseen in the "Privacy Policy", in which reference is made to the contents of this document. Within the Site there may also be hypertext links to websites, pages or online services of third parties. By clicking on such links, the user may access multimedia contents which, being exclusively pertaining to the aforementioned subjects, are beyond the control of 1Dest di Nest Srl and are in no way subject to the provisions of this Privacy Policy. 1Dest di Nest Srl therefore invites the user to be careful when subscribing to services offered by third parties, to carefully read the information on the processing of data provided by the aforementioned subjects, in relation to which 1Dest di Nest Srl cannot carry out any control, nor can it be held responsible.

*** *** ***

1. Data controller

The data controller is 1Dest di Nest Srl (C.F. and P.IVA 02490260227) with registered office in via S. Caterina 74/D, 38062 Arco, e-mail address info@1dest.com and pec address nestsrls@pec.it (hereinafter referred to as "Owner").

2. Type of personal data processed

- Personal data relating to navigation

When navigating the Site, the Owner collects navigation data by means of cookies or other tracking technologies in order to verify the regular operation of the Site and allow the user to take advantage of the services provided therein, as well as to ensure the best navigation, to obtain information on the number of visits for statistical analysis, to create profiles that allow the sending of advertisements in line with the preferences expressed by the user, as well as to identify anomalies and/or abuses.

For more information on the technologies used to collect such data, the Data Controller invites the user to take a look at the following point 4) on Cookies.

- Data provided voluntarily by the user

The Controller also processes personal data provided voluntarily by the user during interaction with the services provided by the Site and, specifically:

  • personal data, such as name, surname and residential address;
  • contact data, such as telephone number and e-mail address;
  • information on the method of payment;
  • information concerning the reservation made.

Overall, "Data".

The optional and voluntary sending of e-mail messages to the addresses indicated on this Site entails the acquisition of the sender's e-mail address, which is necessary in order to process the request, as well as any further personal data voluntarily indicated in the message. This data is used solely for the purpose of replying to the request and is not disseminated in any way.

3. Purpose of processing and legal bases

As part of the consultation of the Site and the use of the services provided therein, Data are processed for the following purposes:

a. enable navigation of the Site, check its proper functioning and ascertain liability in the event of computer crime, and process statistical analyses of visits to the Site (hereinafter referred to as "'the Site'')."Site Navigation"). The legal basis is to be found in the performance of a contract (Art. 6.1 b) Regulation), as well as in the legitimate interest of the Controller (Art. 6.1 f) Regulation), and, with regard to the processing of statistical analyses, in the consent given by the user (Art. 6.1 a) Regulation);

b. check availability on the indicated dates of stay (hereafter "Search Availability"). The legal basis can be found in the execution of pre-contractual measures taken at the request of the data subject (Art. 6.1 b) Regulation);

c. finalise the booking with management of the relevant fulfilments (hereinafter referred to as "Booking"). The legal basis is the performance of the contract (Art. 6.1 b) Regulation);

d. responding to requests for information received (hereinafter referred to as "Contact"). The legal basis can be found in the execution of pre-contractual measures taken at the request of the user (Art. 6.1 b) Regulation);

e. communicate the Data (specifically the e-mail address) to nestsrls@pec.it S.r.l. (a company operating in the field of software development for the hotel industry) for the sending of communications with promotional and advertising content, by e-mail, sms and instant messages, of its products, services and initiatives (hereinafter referred to as "')."Communication"). The legal basis is the consent given by the user (Art. 6.1 a) Regulation);

f. exercising and defending the rights of the Data Controller in any forum, including judicial, administrative, arbitration and mediation or conciliation proceedings (hereinafter referred to as "Defence"). The legal basis is the legitimate interest of the Controller (Art. 6.1 f) Regulation).

With the exception of navigation data (collected automatically by means of cookies or other tracking technologies), the provision of Data is in the nature of:

  • compulsory for the pursuit of the purposes set out in points a), b), c), d) and f) above. Therefore, if the user fails to provide the Data, it will be impossible for the Data Controller to fulfil the request (e.g. to browse the Site, check availability on the indicated dates of stay, finalise the booking and acknowledge any requests received);
  • optional for the pursuit of the purposes set out in letter e) above, specifically for the processing of statistical analysis about visits to the Site, and e). Therefore, failure by the user to provide Data does not make it impossible for the Data Controller to communicate Data to Ciaobooking S.r.l. and to process statistical analysis about visits to the Site, without prejudice to the pursuit of the remaining purposes set out in letters a) and those provided for in letters b), c), d) and f).

4. Cookies

The Site uses technical, analytical and profiling cookies, including third-party cookies, Cookies are used to allow normal navigation and use of the Site, to carry out statistical analysis and to create profiles that allow the sending of advertisements in line with the user's preferences. More information on the characteristics of the cookies used on the Site can be found in the Cookie Policy.

5. Modalities of processing

Within the scope of the purposes indicated in point 3) above, the Data will be processed using electronic instruments, in compliance with the regulations on the processing of personal data, adopting appropriate security measures. Data processing will be handled by the Data Controller's internal staff who are specifically authorised, trained and instructed to ensure the adequacy and confidentiality, as well as to avoid risks of loss and/or destruction and access by unauthorised parties.

6. Communication and dissemination of Data

The Data will not be disseminated. To the extent strictly pertinent to the purposes indicated in point 3) above, the Data may be communicated to:

  • Entitled parties under the law or regulations, such as, but not limited to, public and judicial authorities;
  • Ciaobooking S.r.l. (a company operating in the field of software development for the hotel industry) subject to the user's consent;
  • persons who, in their capacity as autonomous data controllers or data processors, pursuant to Article 28 of the Regulation are involved in the processing of the Data (such as, by way of example but not limited to, the companies that perform management and maintenance activities for the IT systems, platforms and applications in use).

The updated list of data processors is available at the registered office of the Data Controller.

7. Period of Data Retention

The Data Controller retains the Data for the period of time strictly necessary to achieve the purposes for which such Data were collected. Without prejudice to what is expressly provided for in points 3) and 4) above with reference to the Revocation of the Site, the Data for the purposes of:

  • Search Availability will be stored for 1 year from the date of their collection;
  • Booking will be retained throughout the duration of the stay and, by the way, until the limitation of rights arising from the contractual relationship established with the user (10 years after its termination);
  • Contact will be stored no longer than 1 year from the date of their collection, coinciding with the acknowledgement of the request by the Controller;
  • Communication shall be retained until their communication to Ciaobooking S.r.l. and, in any case, for a maximum period of 1 month from the date of their collection. The storage period of Data for sending communications with informative and promotional content of Ciaobooking S.r.l. products and services will be expressly established by the latter and made known to the user;
  • Defence will be retained for the duration of the dispute and until the time limits for any appeal and/or for the statute of limitations of the relevant action have been exhausted;

without prejudice, however, to the right to revoke consent for those processing operations that are based on that legal basis, the exercise of the rights set out in point 8) below, and the fulfilment of specific storage obligations laid down by law.

8. Rights of the data subject

Without prejudice to the provisions and limitations set out in Legislative Decree no. 196/2003 (Part I - Title I - Chapter III), with reference to the Data, the user has the right to ask the Data Controller:

  • access (Art. 15 Regulation);
  • rectification of inaccurate Data and integration of incomplete Data (Art. 16 Regulation);
  • the deletion of Data for the reasons provided for (Art. 17 Regulation);
  • the limitation of processing for the cases provided for (Art. 18 Regulation);
  • Data portability (Art. 20 Regulation);
  • opposition to processing in the cases provided for (Art. 21 Regulation).

Moreover, in the case of processing based on consent, the user also has the right to revoke it at any time without affecting the lawfulness of the processing carried out before the revocation. All the rights listed above may be exercised by sending a communication to the Controller by e-mail to info@1dest.com.

9. Complaint

Should you consider that the processing of Data violates the provisions of the Regulation, you have the right to lodge a complaint with the Data Protection Authority in accordance with the provisions of Article 77 of the Regulation.

10. Transfer of Data Abroad

The Data are stored at the Data Controller's head office and on servers located in the European Union. In the event of transfer of Data abroad, the Data Controller undertakes to ensure that the transfer of Data to these countries takes place in compliance with the provisions of the Regulation and, specifically, in the presence of adequate guarantees (adequacy decisions, standard contractual clauses approved by the European Commission, etc.).

Arch05/08/2025


The Holder

1Dest by Nest Srl