Data Controller
The controller of the personal data collected through www.trevisourbanloft.it is Chrysanthi Thodi, who can be contacted at Via Roma 20, 31100 Treviso (TV), Italy, or by email at: Chrissathodi@yahoo.it.
Data provided when contacting us
When you use the contact form, we process your name, email address, subject and message, together with any additional information you choose to provide. If you contact us by telephone or WhatsApp, we also process your telephone number and the information contained in the conversation.
Please provide only the information necessary for your enquiry, and avoid sending identity documents or health information through the form.
Purposes and legal bases
We use your data to respond to enquiries about information and availability and to manage communications regarding a potential stay. For enquiries relating to a stay, the legal basis is taking steps at your request before entering into a contract, pursuant to Article 6(1)(b) of Regulation (EU) 2016/679.
For other communications, processing is based on the controller’s legitimate interest in responding to messages received, pursuant to Article 6(1)(f) of Regulation (EU) 2016/679, while respecting your rights and freedoms.
The contact details provided for these enquiries are not used to send newsletters or promotional communications.
Provision of personal data
Submitting an enquiry is optional. The fields marked as required in the form are necessary to submit your enquiry. Without valid contact details, we may be unable to reply.
Retention of enquiries
Enquiries that do not result in a booking, together with the related correspondence, are deleted within 12 months of the last contact. In the event of a dispute, only the information necessary to protect legal rights is retained, for the duration of the dispute and until its final resolution.
The processing of data relating to bookings and stays, including administrative, tax and public security requirements, requires specific privacy information and retention periods, separate from those applicable to simple contact enquiries.
Your rights
Where applicable and within the limits established by Regulation (EU) 2016/679, you may request access to your personal data, rectification, erasure, restriction of processing and data portability. You may also object to processing based on legitimate interests.
To exercise your rights, you can write to Chrissathodi@yahoo.it. You also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.
Website hosting
The website is hosted by Aruba S.p.A., which provides the technical infrastructure and processes personal data on behalf of the controller as part of its hosting service, in accordance with the contractual terms and its appointment as a data processor.
Google Analytics
The website uses Google Analytics 4, integrated through Google Site Kit, to measure visits and understand how its pages are used. The service may process online identifiers, pages visited, interactions, traffic sources, approximate geographical location, and information about the device and browser.
The use of statistical cookies requires the user’s consent, pursuant to Article 6(1)(a) of Regulation (EU) 2016/679. Consent is optional and may be changed or withdrawn at any time through the “Manage consent” control on the website, without affecting the lawfulness of processing carried out before withdrawal.
Google processes data on behalf of the controller under the data processing terms applicable to the service. Processing may involve Google companies and service providers outside the European Economic Area, including in the United States. The conditions and safeguards applicable to transfers are described in Google’s terms: https://business.safety.google/adsprocessorterms/
Data retention is set to 2 months for event data and 14 months for user data, with the option to reset the retention period upon new user activity disabled. These limits do not apply to standard aggregated reports. Cookie lifetimes are specified in the Cookie Policy.
Google Signals and ad personalisation are disabled. According to Google’s documentation, for users in the European Union, IP addresses are used to derive an approximate location and are then deleted before the data is recorded.
Further information: https://support.google.com/analytics/answer/6004245?hl=it