Privacy and Personal Data Policy

Privacy and Personal Data Policy - applicable to Users of this Hospitality Business when making a reservation

Data Controller (us): The Hospitality Business that will provide you, the user, with the requested service. Our identification and contact details are available on the website you used to make your reservation / to ask us your questions. They will also appear on our invoice that we will send you.

Data Compliance Officer: Not applicable to the activities of Data Controllers.

User : You, who filled out the reservation form or any other documentation related to it.

Purpose: The purpose of processing the data provided through this form is to manage the reservations made by you, the user, and / or respond to questions / requests made.

Legal Basis:
- Either the necessity to perform our contract with you, the user / the necessity to take measures at your request before entering into a contract.
- Or your consent, the user, by checking the acceptance box of the Terms and Conditions of which this privacy and personal data policy is an integral part.

Duration: We will store the data provided by you, the user, for as long as necessary for the management of the reservation made, as well as the accommodation services requested. Once management is complete, your data will be retained for six (6) months. If you consent to receive marketing and / or commercial information, your data will be stored until you revoke your consent.

Processor: We have contracted our partner Guestcentric Group ( www.guestcentric.com ) to carry out the reservation mechanism of our businesses. Guestcentric acts under our authority and we have signed a contract with Guestcentric Group for the provision of their services. We have instructed Guestcentric Group in writing on how the processing should be carried out.

Data Entities Different from Users: When you, the user, provide us with personal data belonging to a data subject different from you, you are responsible for such acts, as well as for obtaining the respective consent of such data subjects for the provision of their data.

Data Transfer: We must not transfer personal data to a third country outside the EEA (European Economic Area).

Rights of Data Subjects: Data subjects may exercise their rights of access, rectification, cancellation and opposition by sending an email or through postal service to the contact details on our booking website and on our invoices.

Supervisory Authority: If a data subject considers their rights to be affected, they may also appeal to the competent supervisory authority of the Member State in question. More information at: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en