Privacy & Cookie Policy

1. Data controller

ABITA S.R.L. — Via Giacomo Matteotti 471, 45018 Porto Tolle (RO), Italy — tax code and VAT no. 01457090296 — REA RO-158453.

The company runs Albergo Italia, Alloggi Centrale, RistòItalia and Delta Escursioni.

Privacy contacts: info@albergoitalia.ro.it — certified email abitasrlcr@pec.it — phone +39 0426 81006.

2. Data we process

• Identification and contact details: first name, surname, email, phone, language, nationality.
• Stay and booking data: dates, property, room, number of guests, booking channel, payments, special requests.
• Identity document data, only for the mandatory report to the police authority (Questura).
• Restaurant reservations and orders: date, time, number of people, notes. We process allergies or intolerances only if you tell us about them, so we can serve you safely, and we delete them after the service.
• Day and month of birth (never the year), only if you choose to receive birthday wishes.
• Website browsing data, in aggregated form and only if you have accepted analytics cookies.

3. Why we process it and on what legal basis

• A. Managing bookings, stays, tables, orders and excursions, and answering your enquiries

  Legal basis

  Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)

  Providing the data is

  Necessary: without the data we cannot provide the service

• B. Meeting legal obligations: reporting guests to the police authority (Art. 109 TULPS), tourism statistics for ISTAT and the Veneto Region, tourist tax where applicable, tax and accounting duties

  Legal basis

  Legal obligation (Art. 6(1)(c) GDPR)

  Providing the data is

  Mandatory

• C. Service messages about your stay: confirmation, arrival instructions, online check-in, useful information during your stay, a request for feedback after departure

  Legal basis

  Performance of a contract and legitimate interest in improving the service (Art. 6(1)(b) and 6(1)(f) GDPR)

  Providing the data is

  Necessary for operational messages; you may object to the feedback request at any time

• D. If you have already bought one of our services directly from us: sending you offers by email for similar services (stays, restaurant, excursions)

  Legal basis

  Legitimate interest, Art. 130(4) of Italian Legislative Decree 196/2003 (“soft spam”)

  Providing the data is

  You may object straight away and in every message, with one click and free of charge

• E. Sending you offers, news and events by email and WhatsApp

  Legal basis

  Consent (Art. 6(1)(a) GDPR)

  Providing the data is

  Optional

• F. Sending you birthday wishes and a small gift

  Legal basis

  Consent (Art. 6(1)(a) GDPR)

  Providing the data is

  Optional

• G. Offering you tailored proposals based on your stays, your language and your preferences

  Legal basis

  Consent (Art. 6(1)(a) GDPR)

  Providing the data is

  Optional

• H. Aggregated statistics on website use (Google Analytics 4)

  Legal basis

  Consent through the cookie banner

  Providing the data is

  Optional

• I. Protecting our rights in the event of disputes

  Legal basis

  Legitimate interest (Art. 6(1)(f) GDPR)

  Providing the data is

  —

Consent for purposes E, F and G is separate, optional and can be withdrawn at any time. If you do not give it, your stay and our services remain exactly the same.

If you booked through a travel portal (Booking.com, Expedia, Airbnb or others), for purposes A, B and C we only use the data the portal sends us. We do not use it for marketing unless you give us your consent directly, for example at check-in.

4. How we process it

Using electronic and paper tools, with appropriate security measures, and only by authorised, trained staff. We do not sell your data and we do not pass it on to third parties for commercial purposes. We do not take automated decisions producing legal effects on you.

5. Who the data may be disclosed to

• Suppliers processing data on our behalf as processors (Art. 28 GDPR): Octorate (property management and booking engine), HubSpot (contact management and email sending), Google (business email, website statistics, Google Business Profile), Meta (WhatsApp Business), Lovable and Supabase (website and form archive), Zapier (system integration), payment providers.
• Advisers bound by confidentiality: our accountant and legal advisers.
• Public authorities, where required by law: the police authority (Alloggiati Web), ISTAT, the Veneto Region, the municipality, the Italian Revenue Agency.
• Booking portals, for reservations made through them: they are independent controllers of your data.

6. Transfers outside the European Union

Some suppliers (for example HubSpot, Google, Meta, Zapier) may process data in the United States. Transfers take place under the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

7. How long we keep it

• Bookings and stays: for the duration of the relationship, then 10 years for civil and tax obligations.
• Identity document data for the police authority: only for the time needed for the mandatory report.
• Allergies and intolerances: deleted at the end of the service.
• Enquiries with no follow-up: 12 months.
• Marketing, birthday wishes and tailored offers: until you withdraw your consent, and in any case no longer than 24 months from the last meaningful contact (a stay, a visit, opening or replying to one of our messages). At that point we ask you to renew your consent or we delete the data.
• Soft spam (purpose D): until you object, and in any case no longer than 24 months from your last purchase.

Essential cookies

These are required for the website to work. They do not require consent and cannot be disabled.

Analytics cookies (Google Analytics 4)

These are installed only after your explicit consent. Tags are managed through Google Tag Manager and Google Consent Mode v2 keeps all signals denied until consent is given; we do not use advertising or profiling cookies.

Managing consent

You can accept, reject or change your preferences at any time. Withdrawing consent immediately disables analytics measurement.

8. Your rights

At any time you can ask us to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability), object to processing and withdraw your consent, without affecting processing already carried out. Write to info@albergoitalia.ro.it or to abitasrlcr@pec.it.

To stop receiving our messages, simply use the unsubscribe link at the bottom of every email, or reply STOP on WhatsApp. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Minors

Promotional messages and birthday wishes are reserved for people aged 18 or over.

10. Changes

Every update to this notice is published at www.albergoitalia.ro.it/privacy-cookie, together with the version date.