Privacy Policy pursuant to EU Regulation 2016/679 (GDPR)
1. Data Controller
Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as "GDPR"), the Data Controller of personal data processing is:
Fabio Monti
Sole Proprietor with registered office in Monsummano Terme
VAT no.: 02079180473
Email: [email protected]
Phone: +39 333 8575804
The Data Controller carries out the activity of management and intermediation of short term rentals as a professional, operating in compliance with current privacy and data protection regulations.
2. Purpose of processing
Personal data provided by users through this site/booking engine will be processed for the following purposes
- Management of booking requests and contractual relationships;
- Fulfilment of regulatory obligations (e.g. communication to Public Safety, tax fulfilment);
- Pre- and post-stay communications relating to the booking;
- Sending information relating to the stay or any changes;
- Administrative and accounting management;
- Prevention of fraud and misuse of services;
- Sending promotional or informative communications, subject to explicit consent.
3. Legal basis of processing
The processing of data is based on the following legal basis:
- Performance of the booking contract (Art. 6(1)(b) GDPR);
- Fulfilment of legal obligations (Art. 6, para. 1, lett. c GDPR), in particular in tax and public security matters;
- Explicit consent of the data subject for direct marketing purposes, where required (art. 6(1)(a) GDPR);
- Legitimate interest of the Data Controller (art. 6, par. 1, lett. f GDPR), for abuse prevention and service improvement activities.
4. Types of data collected
By way of example, the following data may be collected and processed
- First and last name
- Email address and telephone number
- Tax code or other identification data where required by law
- Payment data (if applicable)
- Data relating to your stay (dates, flat, special requests, etc.)
- Identity documents (where required by law)
5. Method of processing
Data processing is carried out using manual and IT tools, adopting appropriate technical and organisational measures to guarantee the security, confidentiality and integrity of the data processed, in accordance with Articles 32-34 of the GDPR.
The data will not be subject to automated decision-making processes or profiling without the express consent of the data subject.
6. Data storage
The data collected will be retained
- For as long as strictly necessary to manage the booking and contractual obligations;
- For a maximum period of 10 years for tax and accounting purposes;
- For promotional purposes (if authorised), until consent is revoked.
7. Communication and dissemination of data
The data may be communicated to:
- Providers of technical and management services (e.g. PMS, channel managers, booking engines, payment platforms), appointed where necessary as Data Processors pursuant to Article 28 of the GDPR;
- Public authorities and law enforcement agencies (e.g. Police Headquarters), in fulfilment of legal obligations;
- Tax consultants, lawyers or other professionals, for the administrative and accounting management of the activity;
- Property owners, in the event that the Controller acts as Property Manager on their behalf;
- Communications management software (e.g. email marketing or CRM), subject to express authorisation, for promotional purposes.
Under no circumstances will the data be disseminated or transferred outside the European Economic Area, unless using GDPR-compliant cloud services (e.g. certified suppliers with Standard Contractual Clauses approved by the European Commission).
8. Rights of the data subject
The data subject has the right, at any time, to:
- access his/her personal data (art. 15 GDPR);
- request rectification of data (art. 16 GDPR);
- obtain cancellation (art. 17 GDPR);
- request restriction of processing (art. 18 GDPR);
-oppose the processing (art. 21 GDPR);
-receive the data in a structured, commonly used and machine-readable format (portability - art. 20 GDPR);
- lodge a complaint with a supervisory authority (in Italy: Garante per la protezione dei dati personali - www.garanteprivacy.it).
To exercise their rights, the data subject may contact the Data Controller at the email address indicated in point 1.
9. Nature of the provision of data
The provision of personal data is:
- Compulsory for all purposes related to the management of the reservation and the fulfilment of legal obligations (in case of refusal it will not be possible to conclude the reservation);
- Optional for promotional and commercial purposes: failure to give consent does not prejudice in any way the possibility of using the main service.
10. Updates and changes
This policy may be subject to changes to adapt to regulatory changes or changes in processing. Changes will be published on the site and will be effective immediately from the date of publication.
Last updated on 13/05/2025