Privacy
Privacy policy
Last update: 31 October 2026
This privacy policy describes how Hotel Arabesque processes personal data through the website hotelarabesque.it, in accordance with EU Regulation 2016/679 (GDPR).
Data controller
The data controller is Hotel Arabesque, Piazza Cappello da Prete 50, 17024 Varigotti — Finale Ligure (SV), Italy. Email: info@hotelarabesque.it. VAT: 01900880095.
Data we collect
When you browse this site we collect anonymous browsing data (page views, approximate country, browser/device type, language, referrer) via Umami Analytics, a cookie-less analytics tool that does not collect personally identifiable information and does not use cookies. If you contact the hotel by email, phone or booking form, we collect the data you provide (name, contact details, requests) to respond to your enquiry or manage your booking. If you use the chatbot, the dedicated chatbot privacy policy applies.
Virtual assistant (chatbot)
The website offers a virtual assistant (chatbot), provided by EASYLOOP S.R.L. through its ChatBoss service, which processes data on behalf of the Controller as data processor (Art. 28 GDPR) on servers located in the European Union. Conversations are kept for 90 days after the last message and then deleted automatically; during this period authorised hotel staff may read them to answer requests, check the quality of the service and correct the assistant's replies (legitimate interest, Art. 6.1.f GDPR). To generate replies, messages are sent to OpenAI (USA), acting as sub-processor, on the basis of the EU-US Data Privacy Framework and the Standard Contractual Clauses; OpenAI does not use data received via its API to train its models. Conversations held up to 31 October 2026 with the previous assistant are kept for the period stated at the time (up to 24 months) and then deleted automatically. More details are available in the dedicated chatbot privacy notice.
Cookies
The website does not use profiling cookies or third-party analytics cookies. The Umami analytics tool does not install cookies on your device. Strictly necessary technical cookies (e.g. for the admin session or the booking form) may be used, for which no consent is required under applicable law.
Legal basis
Anonymous browsing data via Umami is processed on the basis of the legitimate interest of the controller to understand aggregate site usage and improve its content (Art. 6.1.f GDPR). Data provided through direct contact is processed to respond to your request or to perform a contract (Art. 6.1.b GDPR).
Data retention
Browsing data collected by Umami is kept in aggregated, pseudo-anonymous form. Contact requests are kept for the time needed to handle them and for subsequent legal obligations. Bookings and related data are deleted 24 months after the event.
Recipients and transfers
Data is processed within the European Union. The website and the Umami tool are hosted on a server in Italy (Oracle Cloud, Milan), managed by EASYLOOP S.R.L. on behalf of the controller. No personal data is transferred outside the EU for analytics purposes.
Your rights
You may exercise the rights provided by Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) at any time by writing to info@hotelarabesque.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Disable analytics
Even though Umami does not use cookies and does not collect personally identifiable data, you can disable analytics collection by setting the localStorage value "umami.disabled" to 1 in your browser.
Changes to this policy
This policy may be updated. The last update date is shown at the top of the page.