Check-in Preparation
Privacy Policy
(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)
Dear guest,
pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), we inform you that the personal data you provide through the form and the copy of your identity document will be processed in accordance with applicable laws and the principles of lawfulness, fairness, transparency, and confidentiality.
1. Data Controller
The Data Controller is:
Daniele Franzoi
Casa Maria – Via Borgo San Pietro 8, 30173 Venice (VE), Italy
Email: [email protected]
Phone: +39 041 978411
2. Purpose of Data Processing
The personal data collected (identity, contact details, ID document) will be processed for the following purposes:
Managing your booking request and/or stay;
Fulfilling legal obligations, including communication to public security authorities (Article 109 of the Italian T.U.L.P.S.);
Verifying the identity of guests;
Sending communications related to your booking or stay.
3. Legal Basis of Processing
The processing is lawful as it is:
necessary for the performance of pre-contractual and contractual measures (Art. 6(1)(b) of the GDPR);
necessary to comply with a legal obligation (Art. 6(1)(c) of the GDPR);
based on your explicit consent for the processing of special categories of personal data (Art. 9(2)(a) of the GDPR), limited to the data contained in your identity document.
4. Processing Methods
Data will be processed using both manual and electronic means, applying appropriate security measures and in accordance with the principles established by the GDPR.
5. Data Retention Period
Data will be retained:
for the time necessary to provide the requested service;
subsequently, for the duration required by legal and fiscal obligations;
identity document copies will be deleted within 24 hours after communication to public authorities, unless otherwise required by law.
6. Data Disclosure
Data may be disclosed only to authorized third parties (e.g. IT service providers, competent authorities) for the above-mentioned purposes. Data will not be publicly disclosed.
7. Rights of the Data Subject
You have the right to:
access your data;
request the correction or deletion of your data;
restrict the processing of your data;
object to the processing;
withdraw your consent at any time (where applicable);
lodge a complaint with the Supervisory Authority for Data Protection.
Requests should be addressed to the Data Controller using the contact details provided above.