The data controller for this Grand Hotel San Marino app is Grand Hotel San Marino (GHSM Group), Via Antonio Onofri 31, 47890 San Marino (RSM), Economic Operator Code SM00075 — contact: manuel.didonato@ghsmgroup.sm. The app is built and run on the hotel's behalf by Blasat (Vallefoglia, Italy), as data processor.
Data we process
AI assistant (concierge)
The messages you write in chat are sent to Mistral AI (France) only to generate the reply. Mistral may keep them for up to 30 days for abuse monitoring and does not use them to train its models. Your conversation history stays on your device.
Questions saved to improve the service
We save the text of questions and replies, without your IP address or any other identifier, to understand what guests ask. It is not necessarily anonymous, though: if you write a name, a room number or health information in your message, it stays in the text. So please do not enter personal or health data, documents or payment details. We keep them for at most 12 months and only the latest 500 questions per hotel; older ones are deleted automatically. To have one deleted, write to us with its content and approximate date.
Route "from my location" (only if you ask)
If you ask for directions from where you are, your phone asks for permission and the coordinates are sent to the OpenStreetMap route service (FOSSGIS, Germany). We do not store them.
TV channel logos (only if you open the list)
When you open the TV channel list, the logos are downloaded from Wikimedia (USA), which sees your device's IP address as with any image on the web.
Usage statistics
We count app openings, sections visited and buttons used, anonymously and in aggregate, on our own system (analytics.blasat.com), with no profiling cookies and without identifying you. Only two technical notes stay on your device: where the visit came from (until you close the page) and the month the app was opened as an installed app.
Push notifications (only if you enable them)
We store the technical address your browser creates to receive notifications (it contains no name or phone number) for as long as the subscription is active. You can revoke it at any time from your device settings.
Contacting Reception via WhatsApp (only if you use it)
The button opens WhatsApp on your device with a pre-written but unsent message: you send it from your own account, and Reception sees your number as in any normal conversation. The message does not pass through us; the conversation follows WhatsApp's terms and the hotel's own practices.
Preferences
Theme and language stay on your device; the language you choose is also remembered with a technical cookie ("lang") for one year.
Abuse protection
To limit automated messages to the concierge, the server keeps your IP address briefly, only in its working memory. It is not stored.
Providers and transfers
Working on our behalf: Vercel (hosts the app; a US company, the app's functions run in the EU, in Frankfurt), Upstash (stores questions and statistics; Frankfurt, Germany) and Mistral AI (France). Only Vercel's corporate base (USA) and its global delivery network, which carries the content, sit outside the EU: the safeguards are the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
No account, no third-party or profiling cookies, no sale of data.
Your rights
You can ask to access, correct or delete your data, restrict its use, receive it in a readable format and object to processing, by writing to manuel.didonato@ghsmgroup.sm: we reply within one month. You can also contact the San Marino Data Protection Authority (Autorità di Garanzia per la Protezione dei Dati Personali) or, if you live in the European Union, the authority of your country. Rules applied: San Marino Law no. 171/2018 and Regulation (EU) 2016/679 (GDPR).