Privacy policy

GDPR – General Data Protection Regulation (EU/2016/679)

1. Introduction
   This Privacy Policy aims to inform the user about how their personal data is processed. Bellan Paolo (hereinafter "The Data Controller"), in compliance with Regulation (EU) 2016/679 (hereinafter "GDPR"), ensures the privacy and security of personal data for each visitor (hereinafter "User") in accordance with the provisions of this Policy.

2. Source of Personal Data
   During the stay and management of bookings, the Data Controller may collect information about the User in the following ways:

   • Data voluntarily provided by the User, such as identity documents for registration and compliance with legal obligations;

   • Data collected through communication channels (email, WhatsApp, or any other physical or electronic medium) for sending and receiving the necessary documents for booking and registration.

3. Navigation Data
   The information systems and software procedures used for the operation of the website or other booking platforms may acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses, the type of browser used, the operating system, and information about pages visited. This data is used to gather anonymous statistical information on the use of the site and to ensure proper functionality.

4. Data Voluntarily Provided by the User
   The Data Controller collects and stores data provided by the User at the time of booking and during the stay, including identity documents necessary for compliance with bureaucratic formalities. This data is processed only for the purposes outlined in this Privacy Policy. The submission of identity documents via email, WhatsApp, or any other physical or electronic medium implies the automatic acceptance of this Privacy Policy.

5. Voluntary Provision of Data
   The provision of personal data is optional but necessary for the completion of the bureaucratic formalities related to the stay. Failure to provide such data will make it impossible to complete the booking and proceed with the stay.

6. Purposes of Data Processing
   The collection and processing of personal data provided by the User are carried out by the Data Controller for the following purposes:

   • Compliance with legal obligations regarding guest registration;

   • Data archiving for registration with the competent authorities;

   • Communications related to booking or changes in the stay;

   • Management of the booking and guest reception.

7. Scope of Data Sharing
   The User's personal data may be shared with third parties solely for the purpose of fulfilling legal obligations (e.g., public security authorities), but will not be disclosed to other parties without the User's consent.

8. Data Processing Methods
   Personal data is processed primarily through electronic means, in compliance with the principles of lawfulness, fairness, and transparency set forth in the GDPR, for the time strictly necessary to achieve the purposes outlined above.

9. Data Retention
   Data related to the booking and identity documents will be retained for a maximum period of 10 years, in compliance with applicable tax and public safety regulations. Data provided for registration will be processed until the end of the stay and then archived for the period required by applicable regulations.

10. User Rights
    The User has the right to:

• Request confirmation of the existence or non-existence of personal data concerning them and their communication by sending a request to the email address: la-Chiave@mail.com;

• Request the correction, integration, or deletion of data if inaccurate or no longer necessary;

• Object to the processing of data based on legitimate interests;

• Request the limitation of processing or the portability of their data.

The User may also withdraw their consent at any time, without affecting the lawfulness of processing based on consent before the withdrawal.

11. Cookie Policy
    The website of the Data Controller uses cookies to facilitate navigation. Technical cookies are necessary for the correct functioning of the site and do not require consent. The User can modify their browser settings to disable cookies.

12. Changes to the Privacy Policy
    This Privacy Policy may be periodically updated. The User is invited to regularly review this page to be informed of any changes.