PRIVACY AND COOKIE POLICY

This privacy and cookie policy (hereinafter, “Privacy Policy“) refers to the website https://www.dimorasanpietroroma.it/en/ (hereinafter, the “Site“) and describes the activities and modality of processing of personal data created by Dimora San Pietro Roma di Alessio Picciotti, Via Monte del Gallo 7, 00165 Rome (hereinafter, “Guest House” or “Data Controller“) through the Site, which is owned by the same and is registered by the same state with its own domain.

Data Controller
Pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR“), and in relation to personal data, the Data Controller is: Dimora San Pietro Roma di Alessio Picciotti, Via Monte del Gallo 7 00165 Roma, in the person of Alessio Picciotti, email info@dimorasanpietroroma.it.
The Guest House recognizes the importance of personal data and cares about those of its Users (hereinafter “Users”) therefore undertakes to respect them and their correct processing. The Guest House processes the User’s personal data (hereinafter “Personal Data“) when the User visits the Site and uses the services and features available on the Site. The Privacy Policy has been drawn up in compliance with the GDPR, with Legislative Decree n.196/2003 as amended by Legislative Decree n.101/2018 as well as on the basis of the guidelines of the supervisory authority – the Guarantor for Privacy – and also represents information for the Interested parties pursuant to art. 13 of the GDPR and the applicable national legislation (collectively “Privacy Law“). The Privacy Policy specifies:
♦ who is the Data Controller;
♦ who controls and manages the Personal Data collected and processed through the Site;
♦ what personal information is collected – for what purposes and how the Personal Data are processed;
♦ the scope of communication of the same to third parties and any transfer abroad;
♦ the ways in which the User can verify the processing of Personal Data concerning him and exercise the rights recognized by the Privacy Law.

This information is provided only for the Site and for the activities carried out on the Site and the services provided therein by the Company also through its own data processors and not for other websites that may be consulted by the User via links and/or activities carried out by third parties. In case of consultation of other websites it is recommended to consult the respective privacy policies.

1 Legal basis of the processing
The legal bases identified and chosen for the processing of Personal Data are:
a. as regards the response to your requests for contact, information and consultation of the Guest House, the legal basis of the processing is represented by that referred to in art. 6 lett. b) of the In this case, you may revoke your consent at any time;
b. to fulfil a contractual obligation (to issue the accounting document for the purchase of our services and to respond to your requests);
c. to comply with applicable laws and to institute, exercise or defend against legal proceedings;
d. to pursue a legitimate interest: to make sure your networks and information are secure, to prevent or investigate suspected or actual violations of law, commercial contracts or instances of non-compliance with your business principles.

2 Purpose and modality of the processing
2.1 Purpose of processing
The purposes pursued by the processing are:
a. the provision of the Guest House rental service, the establishment of pre-contractual negotiations with prospect customers-users and/or for the establishment and management of contractual relationships relating to the activities carried out;
b. analysis of the use and navigation of the various sections of the Site, of the analytics of the Site and of the related performances;
c. send you personalized communications and carry out targeted promotional actions.
The processing of Your Personal Data for profiling purposes will take place by third parties, or set by a website other than that of the Company and on servers other than that of the Site, as independent owners and on the basis of their privacy policies, as well as on the basis of Your explicit authorization for their use on the Site. This data processing tool relates the data collected during Your browsing on the sites through the use of third-party cookies if accepted, with the collected data. The interactions and information acquired through these tools are subject to the User’s privacy settings relating to each social network and accessible only by the managers of the platforms themselves. The Guest House will only be given visibility to the aggregate data referring to visits to the Site. About the enabling or disabling of the installation on your internet browser of third-party cookies, described below to manage Your preferences and disable them in any moment;

2.2. Modality of the processing
The data will be processed both manually and with the aid of electronic tools to:
a. reply and manage the User’s requests for information and/or support, to manage questions, communications or users feedback;
b. provide the services requested through the Site, including administrative, accounting, fraud prevention services and activities, including the fulfillment of legal obligations, regulations and community legislation (including anti-money laundering legislation) and for the exercise of rights in judicial seat.
Personal Data will be kept for a period of time not exceeding that necessary to achieve the purposes for which they were collected and, in any case, not exceeding that required by applicable legislation.
Therefore, as regard to the Personal Data subject to consent given in relation to the installation of third-party cookies and for generic marketing, the storage times provided for are those established in the Cookie policy. In any case, the storage time in these cases will take place until the revocation of consent, at any time, by the User.
As for the pre-contractual, contractual and administrative management of the provision of professional services and consulting contact, the storage time will be equal to ten (10) years.

 3 Types of Data Processed
3.1 The only visit and consultation of the Site generally does not involve the collection and processing of the User’s Personal Data. If the User proceeds on his own initiative to register a profile or sending requests, the Data Controller will proceed with the collection and processing of the following Personal Data:
♦ personal information, such as first name, last name, age/date of birth, place of birth, proof of identity;
♦ contact information, such as home address, email address, telephone number, cell phone number;
♦ payment information, such as payment instrument (credit or debit card, bank transfer, etc..) and related data;
♦ information related to the services purchased, such as structure and date of stay, details of services booked and related amounts, evaluation of services provided, complaints, refunds, travel companions or other information related to the services requested and that the current regulations allow to collect;
♦ information relating to the family and the members of the same reservation, such as number of children, dates of birth and other data that the regulations in force permit to collect.
3.2 The processing of Personal Data of users who visit and consult the Site concerns:
♦ navigation data whose transmission is necessary for the operation of computer systems and programs necessary for the operation of the Site;
♦ in association with other data, they allow the identification of users. This category includes, for example, IP (internet protocol) addresses or domain names of the computer used to visit the Site, as well as other parameters relating to the operating system used by the User to connect to the Site. The acquisition of navigation data takes place automatically and unavoidably and may be used for the sole purpose of obtaining statistical information and aggregate data on the use of the Site and verifying its correct functioning. It should be noted that on the website the IP addresses of the analytics are anonymized.
3.3 Data provided voluntarily by individual
In addition, the Guest House collects and processes the Personal Data provided voluntarily by individual users that consist of those data collected by sending e-mails, interacting with the functionality of the Site in the appropriate touch points, requesting information/services offered by the Guest House, filling in other specific forms.

4 Nature of the Provision Data
The provision of Personal Data is voluntary and refers to article 1 letter a), b), c), d) and article 3, 2.1 letter a) above and relating to the Personal Data referred to in article 3, are necessary to allow the Guest House to reply to requests for information, provide the services requested through the Site, manage the functional activities to the services related to related to the activities carried out. In case of failure to provide Personal Data for the aforementioned purposes, the Guest House will not be able to reply to requests for information, provide the services requested through the Site, manage the activities functional to the provision of professional services.

5 Communication of Data

The recipients of personal data collected may be:
♦ persons, professional firms that provide accounting, administrative, tax or legal consulting services to Casa Vacanze;
subjects with whom Casa Vacanze interacts for the provision of services;
subjects that provide services related to the collection of payments (eg PayPal);
♦ other entities or authorities to which, for reasons or legal obligations, it is necessary to communicate your personal data;
♦ persons expressly authorized by the Holiday House to carry out activities necessary for the provision of services (with prior assumption of legal obligation of confidentiality).
Personal data will not be subject to transfer to non-EU countries or to diffusion.

6 Automatic Data Collection Mechanisms – Cookies
The Site uses cookies and other technologies to read and/or store information on the User’s device, there are also buttons and widgets of Facebook. These services allow you to interact with social networks and/or other external platforms directly on the Site. In order to provide a detailed description of these technologies, please consult the extended Cookie Policy described below and referred to here in full.

7 Rights of the Interested Party  
The User can exercise at any time the rights recognized by articles 15 – 22 of the GDPR, including for example the right to obtain confirmation of the existence or not of Personal Data concerning him, verify its content, origin and accuracy, request its integration, updating, rectification, cancellation, transformation into anonymous form, portability. The User may object in whole or in part, or request the limitation of the processing of data for legitimate reasons.
For any question or request about the processing of their Personal Data and to exercise the rights recognized by the GDPR, the User can contact the Guest House at the following address: info@dimorasanpietroroma.it.
You have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which you habitually reside or work or in the State where the alleged violation of your privacy rights occurred. The Italian Supervisory Authority is Garante Privacy, reachable at the certified e-mail address protocollo@pec.gpdp.it.

8 Cookie Policy 
Cookies are small text files that the sites visited send to the user’s terminal, where they are stored, and then retransmitted to the same sites on the next visit.
8.1 Which Cookie we use
The Site uses technical cookies, both own and third-party. These cookies, being of a technical nature, do not require the prior consent of the User to be installed and used.
In particular, the cookies used on the Site are attributable to the following subcategories:
♦ navigation or session cookies, which guarantee the normal navigation and use of the Websites. Not being stored on the user’s computer, they disappear when the browser is closed.
♦ analytical cookies, with which statistical information on the number of users and visits to the Websites is collected and analyzed. The site uses Google Analytics with anonymized IPs. These cookies are assimilated to technical ones.
♦ social widgets, video and plugin: some widget and plugins made available by social networks may use their own cookies to facilitate interaction with the reference site.
♦ reCaptcha is a Google service used for the prevention of SPAM when entering data in a form mail. The cookies generated are necessary for the security of the Company and the User who enters the data.
♦ WordPress functional cookies for the correct use of the platform.
8.2 Communication of third-party service providers related to Cookies
The third-party cookies installed on the Site are listed below. For each of them there is a link to the relative information on the processing of personal data carried out and on the methods for any deactivation of the cookies used. With regard to third-party cookies, the Data Controller is only obliged to include in this policy the link to the third-party website. On the other hand, this subject is obliged to provide information and indicate how to consent and/or disable cookies.

Cookies can be disabled by the user by changing the browser settings based on the instructions made available by the relevant providers at the links listed below.

9 Updates and changes to the Privacy Policy 
The Privacy Policy is subject to changes and updates and the version currently in force is the one published on the Site on 2022, March 15. Changes to the Privacy Policy are communicated by publication on the Site. Please check the Privacy Policy periodically to be informed of any changes.