Privacy Policy pursuant to EU Regulation 2016/679 (GDPR)
Foresteria Bellusci, headquartered at Via Giovanni Amendola 11 – 20017 Mazzo di Rho (MI), as Data Controller, informs you that your personal data will be processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality, as established by EU Regulation No. 679/2016 (GDPR).
1. Data Controller
The Data Controller is:
Foresteria Bellusci
Email: info@foresteria.biz
Phone: +39 329 293 3615
2. Types of Data Processed
The following categories of personal data may be processed:
- Identifying data (name, surname, email, phone number)
- Data related to bookings or stays
- Browsing data (e.g., IP addresses, cookies – see Cookie Policy)
3. Purpose of the Processing
Your data will be processed for the following purposes:
- Managing information requests and reservations
- Fulfilling contractual and legal/accounting obligations
- Sending communications related to your stay (e.g., confirmations, reminders, possible changes)
- Protecting the rights of the Data Controller (e.g., debt recovery, legal disputes)
- Direct marketing purposes (only with your explicit consent)
4. Legal Basis of the Processing
Your personal data is processed on the basis of:
- The performance of a contract or pre-contractual measures
- Compliance with legal obligations
- Your free, explicit, and revocable consent (for marketing purposes)
5. Methods of Processing
Processing will be carried out using paper and/or electronic tools, strictly related to the purposes mentioned above and in compliance with the security measures required by the GDPR.
6. Data Recipients
The data may be communicated to external parties (e.g., tax consultants, IT or management service providers) acting as data processors. Data will not be disclosed.
7. Data Retention Period
The data will be stored:
- For the time necessary to fulfill the contract
- For the duration required by law (e.g., for tax obligations)
- For a maximum of 24 months for marketing purposes, unless consent is withdrawn
8. Rights of the Data Subject
You may exercise the following rights at any time:
- Access to your data
- Rectification or update
- Erasure (“right to be forgotten”)
- Restriction or objection to processing
- Data portability
- Withdrawal of consent (without affecting the lawfulness of processing based on consent before its withdrawal)
To exercise these rights, please send a request to the email address provided above.
9. Right to Lodge a Complaint
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.garanteprivacy.it