Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and general conditions of stay.
The Data Controller processes, depending on the channel and the phase of the relationship, the following categories of personal data:
The data are processed for the purposes and on the basis of the conditions of lawfulness indicated in the following table, pursuant to art. 6 of the GDPR.
| Purpose | Legal basis |
|---|---|
| Management of the booking request and the contractual relationship with the guest | Art. 6.1.b — pre-contractual measures and execution of the contract |
| Fulfilment of communication obligations to public safety (art. 109 T.U.L.P.S., art. 7 D.L. 59/1978 conv. L. 191/1978) | Art. 6.1.c — legal obligation |
| Tax, accounting and administrative obligations | Art. 6.1.c — legal obligation |
| Publication on the bulletin board of the content voluntarily sent by the interested party | Art. 6.1.a — specific consent, revocable at any time |
| Aggregate statistical analysis of the use of the site, for the purpose of improving the service | Art. 6.1.f — legitimate interest of the Data Controller |
The provision of the identification data and identity document of each guest is (required per law): the refusal makes it impossible to execute the stay. The provision of other contact data is optional, but necessary to follow up on the request received; in the absence of such data it will not be possible to respond or proceed with the reservation.
The processing is carried out with IT and telematic tools, with logics strictly related to the purposes indicated and, in any case, in order to guarantee the security and confidentiality of the data through adequate technical and organizational measures, including: encryption of the uploaded identity documents, access reserved only to the Data Controller and to the subjects expressly authorized by him, protected connections for the transmission of the data.
Personal data is not transferred to third parties for commercial or advertising purposes. They may be communicated, within the limits strictly necessary for the purposes indicated, to the following subjects:
Some of the technology service providers referred to in the previous article may process data outside the European Economic Area. In this case, the transfer takes place exclusively to persons who guarantee an adequate level of protection, on the basis of standard contractual clauses approved by the European Commission or other suitable guarantees pursuant to Articles 44 et seq. of the GDPR.
The Site uses: Matomo, a statistical analysis tool installed on infrastructure managed by the Data Controller's technical provider, and not on third-party services such as Google Analytics or advertising platforms. The tool collects aggregated and anonymised information relating to the use of the site (pages visited, origin, type of device), useful exclusively for statistical purposes and to improve the service. No profiling cookies or third-party cookies are used for advertising purposes. The data subject may at any time manage or disable cookies from the settings of their browser.
The sending of a "postcard" (text and/or image) by the guest implies the possibility that the content is published, at the discretion of the Owner, in the public bulletin board of the site, after reading and prior explicit consent expressed by the interested party at the time of sending. The Data Controller reserves the right not to publish content, without obligation to give reasons. The data subject may at any time request the removal of content already published by writing to appartamenti.lapiazza@gmail.com.
Pursuant to Articles 15 to 22 of the GDPR, the data subject has the right to obtain from the Data Controller, in the cases provided for:accesso to their personal data, the adjustment o lintegrazione of inaccurate data, the deletion of data (right to be forgotten), the restriction of the treatment, the portability of data in a structured and readable format, theopposizione to the processing, as well as the right to withdraw consent <g id="65">a) </g>At any time, without prejudice to the lawfulness of the processing based on consent prior to the withdrawal
These rights may be exercised at any time by sending a request to appartamenti.lapiazza@gmail.com, or in writing to the address of the Data Controller indicated in the header.
If the data subject considers that the processing of their data is in violation of current legislation, they have the right to lodge a complaint with the Garante per la protezione dei dati personali, with registered office in Piazza Venezia 11, 00187 Rome, or through the website www.garanteprivacy.it.
The Data Controller is not liable for inconveniences, delays or disruptions deriving from force majeure or events not attributable to its will, including interruptions of public services and adverse weather conditions. The guest is responsible for damage caused with intent or gross negligence to the spaces, furnishings and fixtures of the property.
This report is governed by Italian law. For any dispute, if the guest has the status of consumer pursuant to Legislative Decree 206/2005 (Consumer Code), the exclusive jurisdiction is the court of the place of residence or elective domicile of the consumer, pursuant to art. 33, paragraph 2, letter u) of the same Code.
Last updated: July 2026. The Data Controller reserves the right to modify this information in accordance with any regulatory or organisational changes; the current version can always be consulted at this address. For clarification: appartamenti.lapiazza@gmail.com.