PRIVACY POLICY IN ACCORDANCE WITH REGULATION (EU) 2016/679, hereinafter also referred to as GDPR (updated 30/05/2019).

  1. General information: the undersigned company (A.B.A. Servizi Coop. – ABA Viaggi e Vacanze, hereinafter referred to briefly as the “Company”) hereby informs you that it will process your personal data, which you have provided in your registration form or that has been subsequently added to the form. Only the data that is necessary for the attainment of the purposes set out in this privacy policy will be requested from you and processed.
  • Purposes and legal basis: the Company may process your data for the following purposes:
  1. Subject to your consent, in order to allow you to register with My Bibione and use the functions devoted to you. The legal basis for processing your data is your consent (which you may withdraw at any time by contacting the Company).
    1. Subject to your consent, in order to send you publicity/information on the Company’s products, services and initiatives or carry out market researches. All this will be sent by the Company to your e-mail address or through newsletters (please note that e-mails may be dispatched electronically by automated tools). The legal basis for processing your data is your consent (which you may withdraw at any time by contacting the Company).
    1. Based on your information made available to the Company (including your purchasing habits), in order to create your profile (profiling) that includes a study of your consumption habits and choices. Its aim will be to support the Company’s specific marketing, promotion, direct selling actions and commercial communication, as well as to propose products and services increasingly in line with your requirements. Data processing for this purpose may also take place in databases in automated form. Profiling may be done for individual users or for homogeneous categories of users. Marketing, promotion, commercial communication and direct selling activities will be developed only if you have agreed to the processing of your data for the purposes under point 2, item b) of this privacy policy. The legal basis for processing your data is your consent (which you may withdraw at any time by contacting the Company). The above point excludes cookie profiling, as it may be carried out only if you give your specific consent by continuing to browse our website, according to the privacy policy and information banner to which reference is made.
    1. In order to fulfil a legal obligation, regulation or EU rule. The legal basis for processing your data is the fulfilment of law obligations.
    1. In order to assert or defend the Company’s rights in the appropriate forums (i.e. for legitimate interests, consisting in defending or exercising a right). The legal basis for processing your data lies within the protection of the Company’s legitimate interests. 
    1. In order to, in the event of you having received a discount voucher, recognise you and allow you to apply your discount. The legal basis for processing your data lies within the protection of the Company’s legitimate interests, consisting in securing that the voucher is used only by those entitled to it.
  2. Whether or not data provision is compulsory: the provision of your data for the purposes under point 2, item a) of the privacy policy is not compulsory. However, if you do not provide your data, you cannot register with My Bibione nor use the functions there outlined. This does not include the failure to supply your data in the cases where your consent is required for the purposes under point 2, item c), which will have no consequence on the purposes under point 2, item a) of the privacy policy. Your consent for the purposes under point 2, item a) of this privacy policy is optional, free and can be withdrawn at any time, by contacting the Data Controller. However, failure to give consent will prevent you from registering with our website. The provision of data for the purposes under point 2, item b) of the privacy policy and its related consent are optional and thus the failure to supply data and give consent will have no consequence other than you will not receive the services provided for under that point (i.e. it will not affect the other purposes). This does not include the failure to supply your data in the cases where your consent is required for the purposes under point 2, item c), which will have no effect on the purposes under point 2, item b) of this privacy policy. Moreover, if you agree to the processing of your data for the purposes referred to in point 2, item b. of this privacy policy, you are free to withdraw it at any time without stating the reason (i.e. refuse that such communications be sent to you), by contacting the Data Controller. Other methods of cancellation or objection may also be communicated through other notices. You are free to supply your data and give consent to its processing for the purposes under point 2 item c) and you are free to register with the website and possibly be subject to the activities listed under point 2 item b) of this privacy policy. You can do so also if you decide not to provide your data or agree to its processing for the purposes under point 2 item c) of this privacy policy. The only effect of not supplying data and not agreeing to its processing will be that you may not use the services provided for in that point. If you give consent but do not provide some data, any missing data will not be processed for profiling purposes. The provision of your personal data and contacts and of any additional information may be required at a later stage, if necessary for the purposes under point 2 items d) and e). Failure to provide data and consent will exclude you from all activities. Conversely, failure to provide your data in the cases where your consent is required for the purposes under point 2, item c) will have no consequence. The provision of your data for the purposes under point 2, item f) of this privacy policy is optional and failure to supply data will prevent you from using the discount voucher.
  • Categories of data recipients: the Company will not communicate the data collected and processed for the purposes under point 2, items a), b) and c) of this privacy policy. Your data may be disclosed for the purposes under point 2 item d) of this privacy policy to public bodies, courts, the police and post offices (as the latter can see the address of our written communications). Your data may be disclosed for the purposes under point 2 item e) of this privacy policy to lawyers, legal advisors, public bodies, courts, the police and post offices (as the latter can see the address of our written communications). The Company will only disclose data that is essential to the achievement of the purposes set out in this privacy policy. In addition, the Company may delegate the processing of your data to subjects specifically designated in data treatment on the Company’s behalf. These subjects may include: website operators, even if external to the Company; marketing personnel, even if external to the Company; consultants, even if external to the Company, e.g. legal consultants, IT technicians and quality personnel, even if external to the Company; IT personnel, even if external to the Company; PR staff, even if external to the Company; shipping and mailing personnel, and trainees. Data processors may also include: data controllers, such as IT outsourcing companies and marketing consultancy companies, provided they have been appointed by the Company. You can obtain a list of all involved subjects by contacting the Company at the below-stated contacts.
  • Data retention: the Company may retain and process your data for as long as necessary to achieve the purposes contained in this privacy policy. Data retention period will be as follows:

– for the obligations under point 2 item a), until you withdraw your consent or request the cancellation of your account. Your data may also be retained for longer if we need to prove your previous consent and for the entire period of time in which you may file a complaint.

– for the obligations set out by law, regulations and Community rules, your data may also be retained for the periods laid out in those statutory documents.

– for the purposes under point 2, item a) of this privacy policy, your data may be retained until you withdraw your consent or request the cancellation of your account. Your data may be retained also for longer if we need to prove your previous consent, for the whole period in which you may file a complaint.

– for the purposes under point 2, item c), your data may be retained until you withdraw your consent or request the cancellation of your account. Data on accommodation purchases may be used for profiling purposes for a maximum of 12 months from the registration date, unless it is anonymised in a way that makes it impossible for you to be identified, including in an indirect way or using other databases. Your data may also be retained for longer if we need to prove your previous consent, for the entire period in which you may file a complaint.

– for the purposes under point 2, item d), until your voucher has been used.

– in any case, your data can be retained for as long as necessary to assert or defend the Company’s rights under Italian and European laws.

  • Data Controller and Data Protection Officer: the Data Controller is A.B.A Servizi Soc. Coop. – Aba Viaggi e Vacanze, with registered office at Corso del Sole 6/1, Bibione (Venice). There is also a Data Protection Officer, whom you may contact via e-mail at rpd@bibionehotels.it or at the Data Controller’s postal address.
  • Your rights: we inform you that according to the GDPR, you may ask the Data Controller (at the above-stated addresses) for permission to access and change your personal data, cancel it, set limits or object to its processing or request data portability. You may also exercise other rights according to Chapter 3 of the GDPR, including the right to withdraw your consent where provided. If you withdraw your consent, this will not affect the legitimacy of data processing that was based on your preceding consent.
  • Complaints: you can file a complaint with the Italian Data Protection Authority, whose contacts can be found at www.garanteprivacy.it 
  • Profiling: data processing for the purposes under point 2, item c) of this privacy policy may be considered as profiling. Profiling consists in collecting purchasing information through questionnaires/questions in order to define the travel habits of those who register with My Bibione. The purpose of profiling is to better understand your consumption habits and direct your purchases by means of targeted communication about products/services that are relevant to you. Your data is extracted and processed through special software programs that create a consumer profile based on the products/services you purchase most and based on the information contained in registration forms or questionnaires, whether or not they are associated to your purchases. In any case, this processing does not pose a particular risk to you, as it is basic profiling that does not require especially sensitive data to be provided nor particularly confidential aspects of your private life to be disclosed. In addition, profiling does not generate any legal effects affecting you or your life significantly, and no decision is made based on the automated processing of your data. We wish to repeat that profiling is solely aimed at sending you advertising material in line with your tastes and habits and that this information is always filtered by people, who physically check that all communications are sent to well-defined groups. You are entitled to request human intervention, express your opinion, obtain an explanation for the decision made and object to that decision.
  1. Methods of data processing: the Company may process your data in paper, manual, computer and electronic forms (i.e. data is stored and processed by means of both paper and computer). The Company will retain and process your data taking all necessary protection measures, in accordance with all applicable laws and in compliance with the principles of correctness, lawfulness, transparency and protection of your privacy and rights. Data processing methods will be strictly related to the purposes set out in this privacy policy. Only the operations needed for the achievement of the purposes included in this privacy policy will be carried out using your data. As far as the Company is concerned, your data will be retained at the Company’s offices or by the data processors appointed by the Company (this includes any third parties mentioned in this privacy policy, to which your data may be disclosed and who will process it as independent data controllers). Your data may be organised into records and IT databases.

N.B. For the purposes requiring your agreement, you may only give your consent if you are more than 14 years old. As a result, if you are less than 14, your data cannot be processed for the purposes subject to consent and you cannot request those services.


By providing your consent, you declare you are more than 14 years old.