Effective Date: 06 feb 2025
1. Introduction
Casa Montecastelli (hereinafter referred to as “we,” “us,” or “our”) is committed to protecting the privacy of our customers and visitors. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal information that we receive from you when you visit our website, engage with us, or use our services. By accessing our services, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect the following categories of personal information:
– Name: To identify you in our records.
– Birthday: To comply with age-related regulations and for verification purposes.
– Identification Documents: To verify your identity as per Italian tourism regulations.
– Email Address: To communicate with you regarding your bookings, inquiries, and any other relevant information.
– Telephone Number: To contact you directly for any urgent matters related to your bookings or inquiries.
3. Purpose of Data Collection
We collect your personal information for the following purposes:
– Compliance with Italian Tourism Rules: To ensure that we adhere to all legal obligations set forth by Italian tourism regulations.
– Customer Communication: To provide you with information regarding your bookings, respond to inquiries, and send you important updates.
– Identity Verification: To confirm your identity and ensure the security of our services.
4. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
– Consent: In cases where you provide your explicit consent for us to process your data for specific purposes.
– Contractual Necessity: When processing your data is necessary for the performance of a contract to which you are a party.
– Legal Obligation: When we are required to comply with applicable laws and regulations.
5. Data Retention
We will retain your personal information only for as long as is necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods for different categories of personal information are as follows:
– Name, Email Address, and Telephone Number: Retained for the duration of your engagement with us and for a period of 2 years thereafter.
– Birthday and Identification Documents: Retained for a period of 5 years to comply with legal obligations.
6. Sharing Your Information
We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except for the following circumstances:
– Service Providers: We may share your information with third-party service providers who assist us in operating our website, conducting our business, or servicing you, as long as those parties agree to keep this information confidential.
– **Legal Compliance:** We may disclose your information when required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
7. International Data Transfers
If we transfer your personal information outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable data protection laws, including the use of standard contractual clauses approved by the European Commission.
8. Your Rights Under GDPR and CCPA
As a data subject, you have certain rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):
– Right to Access: You have the right to request copies of your personal data.
– Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
– Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
– Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
– Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
– Right to Opt-Out (CCPA): You have the right to opt-out of the sale of your personal information (though we do not sell personal information).
– Right to Non-Discrimination (CCPA): You have the right not to receive discriminatory treatment for exercising your rights under the CCPA.
To exercise any of these rights, please contact us using the contact information provided below.
9. Security of Your Information
We implement a variety of security measures to maintain the safety of your personal information. We use encryption, firewalls, and secure server hosting to protect your data from unauthorized access, use, or disclosure. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Any changes we make will be effective immediately upon posting the revised policy on this page. We encourage you to review this Privacy Policy periodically for any updates. Your continued use of our services after the posting of changes constitutes your acceptance of such changes.
11. Contact Us
If you have any questions about this Privacy Policy, our data practices, or your rights, please contact us at:
Casa Montecastelli
Frazione Montecastelli 181
06019 Umbertide (PG)
booking@montecastelli.casa
12. Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In the EU, you can contact your local data protection authority. In the United States, you may contact the California Attorney General’s office or other relevant authorities.
13. Conclusion
We value your privacy and are committed to protecting your personal information. This Privacy Policy is designed to inform you about how we collect, use, and protect your data. Thank you for trusting Casa Montecastelli with your personal information.
