Privacy Policy (GDPR)

 Data controller
The data controller of the personal data is Alessandra Perez, who can be contacted at the email address
ovasciodasirena@gmail.com or phone number +39 3335893966.

Types of data collected
The following personal data may be collected through the site:
● First name, last name
● Country of origin
● Number of guests
● Email, phone number
● Credit/debit card information (via secure gateway)
● Special requests
● ID data (collected on site or via email for legal obligations)

Purpose and legal basis for processing
The data collected are processed for the following purposes:
● Reservation and management of the stay (legal basis: execution of a contract)
● Legal obligations (guest registration with public safety authorities -
legal basis: legal obligation)
● Service communications related to booking
● Email marketing activities (only with explicit consent)

Treatment mode
Processing is done electronically and manually, in a lawful, transparent and GDPR-compliant manner.
Data are protected by appropriate technical and organizational measures.
Data retention
● Reservation and billing data: 10 years (for tax obligations)
● Data for public safety obligations: according to the regulations
● Contact data for promotional purposes: until consent is revoked

Communication to third parties
Data may be disclosed to:
● Competent authorities (State Police, municipality, Internal Revenue Service)
● Online payment services (e.g., Stripe, PayPal)
● Tax and information technology consultants
● Site management services or newsletters (e.g., Brevo/Sendinblue)

Extra UE
If using platforms based outside the EU (e.g., email servers or newsletter services),
processing is carried out in compliance with Article 44 et seq. of the GDPR (standard clauses or
adequacy decisions).

Rights of the person concerned
Pursuant to Articles 15-22 of the GDPR, the user can exercise at any time:
● Access, rectification, cancellation, restriction, opposition
● Data portability
● Withdrawal of consent (without affecting the treatment done before)
To exercise your rights, write to ovasciodasirena@gmail.com

Complaints
The data subject has the right to lodge a complaint with the Data Protection Authority
(www.garanteprivacy.it).
Last update
This Privacy Policy is current as of 4/29/2025.