Privacy Policy & Data Protection - updated in compliance with GDPR (EU Regulation 2016/679)
General Information and Scope of the Policy
Applicability and Purpose of the Document
1. Who We Are (Data Controller)
The Data Controller responsible for your personal information under this Privacy Policy & Data Protection is Serenella Maria Messina. She acts as the owner, legal representative, and professional Property Manager for the sole proprietorship SH di Serenella Messina.The purpose of this website, available at https://www.stayhamlet.it, is to promote short-term holiday homes and tourist apartments. Specifically, our hospitality brand operates legally under the following official corporate credentials:
Company Name: SH di Serenella Messina
VAT Number : IT 01585220112
Fiscal Code : MSSSNL61M59F205Y
Ateco Codes: 55.20.42 & 68.32.01
REA Number: MI-2754645
Registered Office : Via Antonio Fortunato Stella 15, 20125 Milan, Italy
Operational Address: Via Castè 1/d, 19020 Riccò del Golfo di Spezia (La Spezia), Italy
2. Types of Data Collected and Purposes
Generally, visiting and consulting this website does not involve the collection or processing of your personal data. This rule excludes basic browsing data and technical cookies, which are strictly necessary for the correct visualization of the website. For more details on these elements, you can consult our dedicated website cookies section.However, in addition to standard browsing data, we may process personal information voluntarily provided by the user. This occurs when you interact with the website's features or request services offered on the platform. In compliance with the Privacy Code, the Site might also collect user personal data from third parties during its normal business activities.Therefore, under this Privacy Policy & Data Protection framework, the Data processed by the Controller includes:
. Personal Identity Data: First name, last name, and gender
. Contact Information: Residential or home address, phone number, and email address
. Identification Documents: Passport or identity card number, and a photograph of the document
. Fiscal and Billing Data: Fiscal Code or VAT Number required for invoice generation.
3. Purposes and Legal Basis of Processing (Legitimate Interest)
The User's Data is collected to allow the Controller to provide their hospitality services effectively. In fact, we process your personal information based on specific legal obligations and legitimate interests.Specifically, under this Privacy Policy & Data Protection document, your information is processed for the following purposes:Official Guest Registration: Communication of guest data to local authorities, including the Municipality, Region, and the State Police portal (Portale Alloggiati della Questura).Statistical Analysis: Data aggregation for regional and national tourism statistics (ISTAT).Guest Communication: Contacting the user directly regarding their booking or requests.User Registration and Authentication: Managing accounts and direct access on our secure platforms.Website Optimization: Heat mapping and session recordings to improve website usability.Customer Support Interaction: Managing live chat platforms, managing contacts, and sending operational messages.Furthermore, if you wish to obtain more detailed information about the specific personal data processed for each individual purpose, you can refer to the relevant sub-sections throughout this official Privacy Policy & Data Protection document.
4. Data Processing Methods and Integrated Services
Specific Channels and Privacy Policy & Data Protection Protocols
Personal Data is collected for specific purposes through various digital services on our platform. To ensure compliance with our Privacy Policy & Data Protection standards, we process your information using the following methods:Website Comments: When visitors leave comments on the site, we collect the data shown in the comments form. In addition, we record the visitor’s IP address and browser user agent string to assist with spam detection.Contact Forms: By filling out the contact form with their personal information, the user authorizes its use. Therefore, we will use these details to reply to requests for information, quotes, bookings, or any other query indicated by the form header.External Links and Social Networks: If the user follows a link leading to an external platform or social network (such as Facebook or YouTube), specific rules apply. In fact, the user must refer exclusively to the privacy policy of that third-party platform.Octorate Booking Engine: To check rates or complete a reservation, users interact with our booking widgets. Consequently, they are securely redirected to the Octorate platform. From there, you can consult specific cancellation policies, rates, and the relevant privacy notices.Reservation Requirements: To book a Stay Hamlet holiday home, the guest must provide their personal data. We use this information solely to fulfill our legal obligations and to maintain direct communication via email or telephone.Document Deletion Policy: For your security, all photographs and digital copies of identification documents are automatically and permanently deleted right after checkout, as soon as all official police reporting obligations are fulfilled.
5. Data Recipients and Third-Party Disclosures
We do not sell, rent, or trade your personal information to third parties. However, under this Privacy Policy & Data Protection framework, we may share your data with selected recipients to fulfill legal obligations and ensure a smooth stay.Specifically, your information may be communicated to the following entities:Public Authorities and Law Enforcement: We transmit guest data to the local Municipality for tourist tax purposes and to the State Police (Portale Alloggiati della Questura) as required by Italian law.Third-Party Technical Service Providers: We share necessary data with trusted platforms that power our business. For instance, this includes our booking engine Octorate and our secure payment gateway Stripe.Professional Advisors: In addition, we may share billing data with our accountants and legal advisors to manage tax and financial duties.H3: Data Retention and Staff AccessFor the specific purposes of the Stay Hamlet website, your personal data will only be processed by authorized personnel or designated data processors.Consequently, we store your customer data securely. The Data Controller will consult this information exclusively to offer future discounts and to speed up registration during your subsequent bookings.H3: Credit Card Security and Stripe FrameworkAll online payments on this website are processed through Stripe. Therefore, your credit card details are fully encrypted during transit and at rest.Additionally, no operators or managers of the stayhamlet.it website can ever view or access your financial credentials. For more comprehensive information regarding financial data management, please consult the official Stripe Privacy Center at stripe.com.
6. International Data Transfers
Currently, we do not transfer your personal data to countries outside the European Economic Area (EEA). Therefore, all processing activities take place within secure European borders.However, a cross-border data transfer might become necessary in the future to improve our services. In that case, we will perform strict evaluations regarding the security standards and reliability of those specific third countries.Consequently, we will provide you with a timely, official update to complement this Privacy Policy & Data Protection document before any transfer occurs.
7. Data Processing Methods and Retention Periods
We process your personal data using appropriate procedures and security measures. These include electronic and automated tools designed to protect your privacy. In fact, we adopt adequate organizational and technical security systems to safeguard your information.Your customer data will be accessed exclusively by the Data Controller. Consequently, we use this information to offer future promotional discounts. This process also allows us to speed up your registration and check-in procedures during subsequent bookings.H3: Retention Timelines under Legal ObligationsYour personal data will be stored securely for the time frame required by national and local authorities. This practice allows official controls and compliance checks.However, under this Privacy Policy & Data Protection framework, your data will be kept for a maximum period of 5 years from the moment of your booking.
8. Your Data Protection Rights under GDPR
Under the European General Data Protection Regulation (Articles 15-22), you hold specific legal rights regarding your personal information. Therefore, within this Privacy Policy & Data Protection framework, you can request to exercise the following rights at any time:Right of Access: You can request confirmation of whether we process your data and obtain a full copy.Right to Rectification: You can request the immediate correction or integration of inaccurate or incomplete information.Right to Erasure (Right to be Forgotten): You can request the permanent deletion of your data, provided legal conditions are met.Right to Restrict Processing: You can ask to limit how we use your data under specific statutory requirements.Right to Data Portability: You can receive the structured, automated data you provided to transfer it to another controller (pursuant to Article 20).Right to Object: You can object to processing activities based on reasons related to your particular personal situation.If you wish to exercise any of these privacy rights, please send an official request to serenella@stayhamlet.it. We will process your inquiry promptly in full compliance with GDPR timelines.
Final Provisions and Right to Complain | Contacts for Your Privacy Policy & Data Protection Rights
The Data Protection Officer for the Stay Hamlet website is always available to clarify any doubts or questions. Therefore, you can contact her directly at the dedicated email address: serenella@stayhamlet.it to exercise your legal rights.Furthermore, you hold the right to lodge an official complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you deem it necessary. You can visit their official platform at www.garanteprivacy.it to safeguard your personal data and rights.H3: Updates to this DocumentAdditionally, this Privacy Policy & Data Protection disclosure may be updated in the future whenever necessary. Ultimately, we highly recommend that you consult this page periodically to stay informed about any new updates or legislative changes.
Finally, to learn more about how we safeguard your information under this Privacy Policy & Data Protection framework, we invite you to review our full legal notices. Therefore, you can consult our dedicated sections, in particular our Cookie Policy and our general Booking Terms & Conditions.
