Privacy and Data Policy

Privacy and Personal Data Policy - applicable to Users of this Hospitality Business when making a reservation

Data Controller (we): The Hospitality Business that will provide you, as a user, with the requested service. Our identification and contact details are available on the website you used to make your reservation/ask us for your questions. These details will also be included on the invoice we send you.

Data Compliance Officer: Not applicable to the activities of Data Controllers.

User: You, who completed the booking form or any other documentation related to it.

Purpose: The purpose of processing the data provided through this form is to manage the reservations made by you, the user, and/or respond to the questions/requests presented.

Legal Basis:
- The need to perform the contract concluded with you, the user, and/or the need to take steps at your request prior to concluding a contract.
- Or your consent, as a user, by selecting the box to accept the Terms and Conditions, of which this privacy and personal data policy is an integral part.

Duration: We will retain the data provided by you, the user, for the time necessary to manage your reservation and the accommodation services you requested. Once management is complete, your data will be retained for six (6) months. If you have given consent to receive marketing and/or commercial information, your data will be retained until you revoke your consent.

Processor: We hire our partner, Guestcentric Group (www.guestcentric.com), to provide our business's booking engine. Guestcentric acts under our authority and has entered into a contract with Guestcentric Group to provide these services. We provide written instructions to Guestcentric Group on how the data is processed.

Data subjects other than users: When you provide us with personal data relating to a data subject other than yourself, the user, you will be responsible for such action, as well as for obtaining the respective consent of these data subjects for the transmission of their information.

Data Transfer: We will not transfer personal data to a third country outside the EEA (European Economic Area).

Data subject rights: Data subjects may exercise their rights of access, rectification, erasure and objection by sending an email or by post, using the contact details provided on our booking website and on our invoices.

Supervisory Authority: If a data subject considers that their rights have been affected, they may also lodge a complaint with the competent supervisory authority in their Member State. More information at: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en.

Important information: At check-in, guests must present the credit card used to make the reservation, as well as a valid identification document (ID card and passport are accepted), in physical format, for all guests, regardless of age. If the same credit card is not presented, the full amount will be refunded and charged directly to the guest.