Your data and our Website
How does that work?
Transparency first!
We will only use your data to enable you to use our website.
On this page, you will find all the information regarding the processing of your personal data: where, when, how, and why we process your data, as well as a list of your rights.
Your data will not be sold or transferred to third parties.
Your data (meaning the data you entrust to us) will only be used by Le Case di Valentina.
We commit to never selling or transferring your data.
If in some cases, we use external providers, know that they will operate on our behalf and in accordance with our instructions.
How to contact us
The data controller is Le case di Valentina di Pescerelli Valentina, with registered office in Via Filippo Argelati, 45 – 20143 Milan (MI).
You can contact us at any time by writing to the following e-mail address: valentina@lecasedivalentina.com
Privacy of our Website
How we use your personal data
Last updated: 23 May 2023
Why this Policy?
This privacy policy, provided in accordance with Articles 13 and 14 of the GDPR, applies to the website lecasedivalentina.com (the “Website”) and is provided by Le case di Valentina di Pescerelli Valentina (hereinafter referred to as “Le Case di Valentina”) with registered office in Via Filippo Argelati, 45 – 20143 Milan (MI), Italian fiscal code PSCVNT74D44A944F, VAT number 10469260961 as the Data Controller.
The Website is owned by Le Case di Valentina, which is also the registered domain name owner.
In this policy, singular terms include their plural forms and vice versa. In compliance with the GDPR, with this policy, we aim to inform you that Le Case di Valentina will process the personal data provided and collected through the Website as described below.
Data Controller
Le Case di Valentina, as Data Controller, can be contacted using the following details:
- Address: Le case di Valentina – Via Filippo Argelati, 45 – 20143 Milano (MI)
E-mail: valentina@lecasedivalentina.com
What information do we collect, for what purposes and what are the legal bases?
Le Case di Valentina will process personal data collected and/or provided through the Website in accordance with the methods and for the purposes described in this section.
Reservations through the Website
- Data processed. When the User decides to make a reservation on the Website, Le Case di Valentina will process the following categories of personal data:
- Booking details:
- name, surname;
- e-mail address;
- phone number;
- nationality;
- check-in/check-out dates,
- number of guests;
- transaction amount;
- credit card data;
- Rental agreement details:
- name, surname;
- residential address;
- phone number;
- Billing information:
- name, surname;
- e-mail address;
- phone number;
- residential address;
- tax code;
- Payment method details:
- credit card details.
- Booking details:
For more information regarding the processing of user payment card data, please consult paragraph 3 below.
- Purpose of processing. The data mentioned in this paragraph will be processed o facilitate the conclusion of the contract and the proper execution of related operations (and, if required by sector-specific regulations, to fulfill tax obligations).
- Legal bases. The legal bases for the processing is the necessity to perform the contract entered into by the specific user when making a reservation for a property on the Website
- Data provision requirement: The provision of the data mentioned in this paragraph is necessary, and without it, it will not be possible to book stays in the properties or access ancillary services through the Website of Le Case di Valentina.
- Data retention period. Le Case di Valentina will retain the processed data to enable the purchase of stays in the properties through its Website for a maximum period of 10 (ten) years from the booking date. This period may be extended if necessary to comply with a legal obligation to which Le Case di Valentina is subject or to protect a right of Le Case di Valentina before a competent authority.
Self-check-in for guests
- Data processed. In order to check-in guests, Le Case di Valentina will process the following categories of user’s personal data:
- name, surname, gender, nationality, date of birth;
- municipality, region and country of birth, country of residence;
- e-mail address;
- phone number;
- check-in/check-out dates;
- type, number and expiration of the identity document;
- Place (municipality/country) of issuance of the identity document
- Purpose of processing. The data mentioned in this paragraph will be processed to check-in in the rented properties.
- Legal bases. The legal bases for the processing is the necessity to perform the rental agreement entered into by the data subject (Article 6, paragraph 1, letter b) GDPR). The legal bases for the processing is also the necessity to comply with a legal obligation to which Le Case di Valentina is subject (Article 6, paragraph 1, letter c) GDPR)
- Data provision requirement. The provision of the data mentioned in this paragraph is necessary, and without it, it will not be possible to fulfill the legal obligations and consequently execute the contract.
- Data retention period. Le Case di Valentina will retain the processed data to enable pre-check-in through its website for a maximum period of 10 (ten) years from the booking date. This period may be extended if necessary to comply with a legal obligation to which Le Case di Valentina is subject or to protect a right of Le Case di Valentina before a competent authority.
Mandatory communications
- Data processed. In order to communicate guest information to the Police Headquarters in accordance with Article 109 of the TULPS (Consolidated Law on Public Security) and to communicate tourist presence to Istat (Italian National Institute of Statistics) through the “Alloggiati” portal in accordance with Article 7 of Legislative Decree No. 322/1989 and the DPR (Decree of the President of the Republic) of November 25, 2020, approving the National Statistical Program 2017-2019 – Update 2019, Le Case di Valentina will process the following categories of user’s personal data:
- name, surname, gender, nationality, date of birth;
- municipality, region and country of birth, country of residence;
- e-mail address;
- phone number;
- check-in/check-out dates;
- type, number and expiry date of the identity document;
- Place (municipality / country) of issue of the identity document
- Purpose of processing. The data mentioned in this paragraph will be processed to communicate guest information to the Police Headquarters and to report tourist presence to Istat.
- Legal bases. The legal bases for the processing is the necessity to comply with a legal obligation to which Le Case di Valentina is subject (Article 6, paragraph 1, letter c) GDPR)
- Data provision requirement. The provision of the data mentioned in this paragraph is necessary, and without it, it will not be possible to fulfill the obligations imposed by law and consequently execute the contract.
- Data retention period. Le Case di Valentina will retain the processed data to comunicate guest information to the Police and to Istat for a maximum period of 10 (ten) years from the booking date. This period may be extended if necessary to comply with a legal obligation to which Le Case di Valentina is subject or to protect a right of Le Case di Valentina before a competent authority.
Marketing Activities
- Data processed. Some of the personal data provided by a user when booking a property through the Website, such as name and e-mail address
- Purpose of the processing. Le Case di Valentina may process the personal data mentioned in this paragraph for marketing activities, which may include the following methods:
- Limited to Le Case di Valentina’s customers, sending e-mail messages to the contact details provided during the booking of a stay at a property through the Website, related to similar services to those purchased through the Website (soft-spam)
- Sending promotional newsletters, conducting market survey, including evaluating user satisfaction, and sending advertising material related to Le Case di Valentina’s services, including through automated systems such as email (marketing purposes), referring to services different from those purchased by a customer through the Website or directed to users who are not yet customers of Le Case di Valentina. These messages and promotional communications may also refer to products and/or services of Le Case di Valentina’s partners. However, Le Case di Valentina will not share the data of the individuals with such parties but will handle the sending of communications and messages regarding their services themselves. In this case, the legal bases for the processing is the consent of the individuals to carry out this type of activity;
- Legal bases of processing. The legal bases on which Le Case di Valentina’s processing of personal data for direct marketing purposes is based are as follows:
- Legitimate interest of Le Case di Valentina in the case of communications related to services similar to those purchased by its customers on the Website (soft-spam), in accordance with art. 6, par. 1, lett. f) GDPR and art. 130, paragraph 4 of Legislative Decree no. 196/2003 (“Privacy Code”). Data subjects have the possibility to object to the processing as described in the subsequent paragraph.
- Consent of the data subjects in the case of promotional messages sent to non-customer of Le Case di Valentina or related to services different from those already purchased by a customer of Le Case di Valentina, in accordance with Article 6, paragraph 1, letter a) GDPR.
Data subject may object to the processing of their personal data for this purpose by sending an e-mail to valentina@lecasedivalentina.com or through the specific link provided in the footer of any promotional e-mail sent by Le Case di Valentina.
- Data provision requirement. The provision of data mentioned in this paragraph, as well as giving consent to their processing, when necessary, is optional, and the lack thereof will not affect the purchase through the Website.
- Data retention. The data processed for direct marketing purposes will be retained until consent is revoked. If the interval of time between one newsletter sending and the next exceeds 1(one) year, Le Case di Valentina will request to renew the consent. If the processing changes or evolves significantly, Le Case di Valentina will request the renewal of consent for the processing of such data. Le Case di Valentina may extend the retention period if necessary to comply with a legal obligation imposed on Le Case di Valentina or to protect a right of Le Case di Valentina before a competent authority.
Data provided during contacts with data subjects
- Data processed. Le Case di Valentina may process the personal data provided by data subjects (e.g. name, surname, contact details, any other information contained in the requests of the data subjects ) when they decide to contact the owner company through the contact information available on the Website (e.g. telephone number, e-mail, paper mail), as part of the customer care service or for any other request relating to the services and activities of Le Case di Valentina.
- Purpose of the processing. Le Case di Valentina will process the personal data referred to in this paragraph solely for the purpose of responding to the requests made by data subjects.
- Legal bases of processing. The legal bases for the processing described in this paragraph are as follows:
- The necessity of performing a purchase contract in the case of data subjects contacting Le Case di Valentina for customer care activities (Article 6, paragraph 1, letter b) GDPR);
- the consent of the data subjects if they contact Le Case di Valentina for any other kind of information (Article 6, paragraph 1, letter a) GDPR). In particular, the fact that a data subject decides to contact Le Case di Valentina by submitting a request to the same will be considered an unequivocal positive action equivalent to a written consent pursuant to art. 4, n. 11) GDPR.
- Data provision requirement. The provision of the data mentioned in this paragraph is optional but, without it, Le Case di Valentina will not be able to follow up on the requests made by the data subjects.
- Retention period. The data processed as described in this paragraph will be retained for the period strictly necessary to respond to the requests of data subjects Le Case di Valentina may extend this retention period if necessary to comply with legal obligations to which it is subject or to protect a right of Le Case di Valentina before a competent authority.
Navigation data
When a user visits the Website, Le Case di Valentina collects the following navigation data:
- Technical information, including IP address, information about the devices used by Website visitors, browser and operating system information, etc.
- Information about navigation on the Website, including URLs of visited pages and activities performed on the page, dates and times of navigation, time spent on the Website, clickstream.
This information is collected for the proper functioning, management, maintenance, and improvement of the Website, as well as to ensure the security of users’ navigation and to ascertain responsibility in the event of cybersecurity breaches. They are also used to allow Le Case di Valentina to obtain statistical analysis of the Website usage, with the possibility of analysing the data in aggregated form, and to enable the receipt of promotional advertisements in line with users’ preferences and interests.
The processing of navigation data is also necessary to enable purchases through the Website.
Users of the Website are always free to decide whether to provide their browsing data, for example by choosing to disable cookies through their browser settings. refusing to provide information necessary for navigation purposes may make it impossible to carry out activities closely related to navigation itself, including the consultation and interaction with our website, as well as the completion of purchases through the Website.
Such data are kept only for the time strictly necessary for the purposes for which they are collected.
Navigation data is collected using cookies. To learn more about how cookies work, how to enable and disable them, please refer to our cookie policy .
Plug-ins and social interaction
The Website allows interaction with third-party websites and social networks (Google, Instagram, Facebook) through hyperlinks, sharing buttons, social plug-ins, and other similar tools.
By accessing areas of the Website equipped with these tools, the Internet browser will connect the data subjects directly to the servers of the respective third-party websites, thus transferring their personal data to the operators of those sites.
The transfer of data will be carried out based on the consent of the data subjects, expressed unequivocally when they click on a specific hyperlink, plug-in button, or other similar tool. Depending on the specific agreements in place with the operators of such third-party websites, Le Case di Valentina may act as an independent data controller or joint data controller regarding such data transfers. For privacy protection methods and the processing of personal data collected by the operators of third-party sites with which the described interactions occur, please refer to the respective sites.
Payment card details.
To make a payment through one of the types of payment card indicated on the Website, the user enters the confidential payment card data directly on the page that communicates through secure encryption protocol with the payment service provider (which acts as an independent data controller) without passing through the server of Le Case di Valentina which, therefore, will not process such data in any way. The data will be acquired in encrypted format.
Regarding the processing of payment card data, please note that it is necessary to enable the conclusion of the online purchase contract with Le Case di Valentina. Failure to provide this data will therefore prevent users from completing the online purchase process.
Processing methods
The processing of personal data of the data subjects will be mainly carried out using electronic or automated means, in accordance with the modalities and with suitable tools to ensure the security and confidentiality of the data in compliance with the GDPR. All necessary technical, computer, organizational, logistical, and procedural security measures will be implemented to guarantee the minimum level of data protection required by law, allowing access only to persons authorized for processing by Le Case di Valentina or by the data processors designated by Le Case di Valentina.
The information collected and the processing methods will be relevant and not excessive in relation to the type of services provided. The data will also be managed and protected in environments under constant access control.
Who do we share your information with?
The personal data of the data subjects processed in accordance with this policy may be disclosed to:
- all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions;
- Companies or third-party entities responsible for providing the services purchased through the Website;
- persons in charge of check-in/check-out procedures;
- banks and companies that manage national or international payment circuits through which online payments are made for products purchased through the Website;
- Companies, consultants, or professionals appointed for the installation, maintenance, updating, and general management of the hardware and software used by Le Case di Valentina for the provision of its services;
- External companies in charge of sending advertising communications on behalf of Le Case di Valentina;
- Employees and/or collaborators of Le Case di Valentina;
- Public and/or private subjects, individual and/or legal subjects (such as legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Labor Offices, etc.), where the communication is necessary or functional to the proper fulfillment of contractual obligations, as well as obligations arising from the law.
The data relating to the data subjects will not be disclosed, except in anonymous and aggregate form, for statistical or research purposes.
Data transfer outside the EEA
Le Case di Valentina will not transfer the personal data of data subjects to countries outside the European Economic Area (“EEA”), which includes, in addition to the member states of the European Union, Norway, Liechtenstein and Iceland.
If this is necessary to pursue the purposes of the processing described in this policy, Le Case di Valentina guarantees that any transfers of data outside the EEA will be carried out in a way as to guarantee the full protection of the rights and freedoms of the data subjects. If, regarding the recipient third country, no adequacy decisions have been issued by the European Commission, data transfers will be carried out by adopting the guarantees provided for in articles 46 and following of the GDPR, including the standard contractual clauses approved by the European Commission, and a weighted assessment of the legislation of any third country of destination.
Your rights and how to contact us
We would like to remind you that, in accordance with the applicable provisions, you have the right to obtain access to your personal data from Le Case di Valentina, as well as the right to rectify or erase such data, or to restrict the processing concerning you, or to object to the processing (Articles 15 and onwards of the Regulation).
Requests should be addressed:
- via e-mail: valentina@lecasedivalentina.com
- or by post-mail: Le case di Valentina di Pescerelli Valentina – Via Filippo Argelati, 45 – 20143 Milano (MI)
Right to lodge a complaint
Data subjects who believe that the processing of their personal data is in violation of the provisions of the Regulation have the right to lodge a complaint with the supervisory authority, as provided for in Article 77 of the Regulation, or to seek appropriate judicial remedies (Article 79 of the Regulation).
Changes
Le Case di Valentina reserves the right to make changes to this Privacy Policy at any time, providing adequate notice to the users of the Website and ensuring, in any case, an adequate and equivalent protection of personal data. To review any changes, you are invited to regularly consult this Privacy Policy.