Privacy Policy

Data Controller

The data controller for personal data is:

Personal Data Collected

We collect the following types of personal data:

Purpose of Data Processing

We wish to inform you that your personal data, collected through registration or booking, will be used by Rooms & Villas for the following purposes:

• • Bookings: to manage and confirm your reservations at our properties
• • Service delivery: to provide you with the tourist services requested and ensure a comfortable stay
• • Service communications: to send you information related to your booking, check-in, check-out and other necessary communications
• • Marketing: with your consent, to send you promotional offers, newsletters and information about services and tourist proposals
• • Statistical analysis: to process anonymous statistics on the use of our services and improve the quality of our offering
• • Legal compliance: to comply with legal, tax and regulatory obligations applicable to the tourism sector

Data will be processed using IT and manual tools, with logic strictly related to the indicated purposes and in compliance with the security measures required by current regulations.

Legal Basis

The processing of your personal data is based on:

• • Your explicit consent
• • Performance of a contract or pre-contractual measures
• • Compliance with legal obligations
• • Legitimate interest of the data controller

Data Retention

Your personal data is retained for the time necessary to pursue the purposes for which it was collected, and in any case no longer than the periods required by law. Booking-related data is retained for the period required by tax regulations.

Your Rights

In accordance with the GDPR (EU Regulation 2016/679), you have the right to:

• • Access your personal data
• • Request rectification of inaccurate data
• • Request deletion of your data
• • Restrict the processing of your data
• • Object to processing
• • Request data portability
• • Withdraw consent at any time
• • Lodge a complaint with the supervisory authority

Data Security

We adopt appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss or destruction. Our site uses HTTPS protocol to ensure secure data transmission.

Sharing with Third Parties

Your data may be shared with:

• • Booking service providers (Lodgify)
• • Professionals and consultants for legal/tax obligations
• • Competent authorities when required by law

We do not sell or transfer your personal data to third parties for marketing purposes.