Introduction and Data Controller

This policy describes the methods of processing the personal data of users who visit the website centrumotel.com (hereinafter, the "Site"). The Data Controller is Centrum Otel, with registered office at Borgo Guerra 4, contactable at the email address info@centrumotel.com or at the telephone number +39 399 425 340.

This policy is provided pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 (Privacy Code) and applies to all services offered through the Site.

Data Collected and Purposes of Processing

Personal data is collected for the following purposes:

• To provide the requested services (e.g., managing bookings, responding to contact requests).
• To fulfill legal, accounting, tax, and administrative obligations.
• To send, subject to consent, marketing communications regarding offers and news.
• To improve the browsing experience and security of the Site.

Categories of Data

Depending on the services used, the following may be processed: personal details (name, surname), contact data (email, telephone), booking data (dates, preferences), navigation data (IP address, browser type, pages visited).

Legal Basis and Retention

The processing is based on the data subject's consent, the execution of a contract to which the data subject is a party, or the fulfillment of a legal obligation to which the Controller is subject.

Data is retained for the time strictly necessary to achieve the purposes for which it was collected, in compliance with legal deadlines.

Cookies and Tracking Technologies

The Site uses technical cookies, necessary for its proper functioning, and analytical cookies (anonymous) to understand how users interact with the pages. For profiling or third-party cookies (e.g., Google Analytics, social media pixels), explicit consent is requested via a specific banner.

The user can manage or revoke cookie preferences at any time through their browser settings.

Data Transfer and Recipients

Data may be disclosed to parties acting as data processors (e.g., IT service providers, payment platforms, consultants) strictly necessary for the purposes indicated above.

Data is not disseminated nor systematically transferred to countries outside the EU, except with adequate safeguards (e.g., EU Commission adequacy decisions, standard contractual clauses).

Data Subject Rights

At any time, the user can exercise the following rights by contacting the Controller at the contact details provided above:

• Right to access their data.
• Right to rectification or erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing, including direct marketing.
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before the withdrawal.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it.

Data Security and Privacy Contacts

The Controller adopts appropriate technical and organizational security measures to protect data from unauthorized access, disclosure, alteration, or destruction.

For any questions regarding this policy or the exercise of your rights, you can contact the Controller at the email address info@centrumotel.com, specifying "Privacy Request" in the subject line.

Updates

This policy may be updated. The last revision was made on October 25, 2023. We invite you to consult this page periodically.