Privacy

Draft to be reviewed: Replace the fields in square brackets with your own information and have the text reviewed before final publication.

Privacy Notice pursuant to Articles 13–14 of EU Regulation 2016/679 (GDPR).

Data Controller

[COMPANY NAME / FIRST AND LAST NAME], [ADDRESS], VAT No. / Tax ID [NUMBER]. To exercise your rights, please write to [CONTACT EMAIL].

What data we collect

• Reservation data: name, email, phone number, dates of stay, number of guests, and any special requests.
• Payment data: managed by the payment service provider . We do not store card numbers on our systems.
• Browsing data: technical data collected by the website and the services indicated on the Cookies page.
• Identification documents: if requested, solely to fulfill reporting obligations to law enforcement authorities.

Why we process this data and on what legal basis

• To manage your reservation and stay — performance of the contract.
• To comply with tax obligations and reporting requirements to authorities — legal obligation.
• Responding to requests submitted via the contact form — legitimate interest.
• Sending promotional communications — only with your consent, which may be revoked at any time.

To whom your data may be disclosed

To third parties that provide us with essential services: payment service providers, map services, booking platforms through which you made your reservation, our accountant, and our hosting provider. We do not sell your data to third parties. Some providers may process data outside the European Union, subject to the safeguards provided by the GDPR.

How long we retain it

Booking data is retained for as long as necessary to manage your stay and, for accounting records, for the periods required by law (typically 10 years). Requests submitted via the contact form are retained for as long as necessary to respond.

Your rights

You may request access to, correction, deletion, restriction, or portability of your data, and object to its processing by writing to [CONTACT EMAIL]. You also have the right to file a complaint with the Data Protection Authority.