Privacy and Data Processing – Short-term Rentals
In accordance with Article 13 of the European Regulation 2016/679 (GDPR), the property owners subject to rental, hereinafter referred to as Data Controllers, inform clients about the processing of personal data.
Data Controllers:
- Private owners: each owner is the controller of the data relating to their own properties.
- Owner with VAT number: Damolin Pierangelo, VAT 02402740225, is the controller of data relating to the properties managed as a business.
Damolin Pierangelo has provided operational support until a date to be determined., without assuming responsibility as data controller.
1. Types of data processed
The data processed may include:
- Personal and contact information (name, surname, address, phone number, e-mail, date and place of birth)
- Fiscal and banking data, if required for invoicing or payments
- Data related to the stay and other data strictly connected to the provision of the service or contractual management
2. Purpose of the processing
Personal data are processed to:
- Fulfill legal obligations, including reporting guests to public security authorities
- Manage payments directly by the owners
- Meet the fiscal and accounting obligations of the owners
- Send organizational or informational communications related to the stay
3. Legal basis
The processing is lawful because it is:
- Necessary for the execution of a contract or pre-contractual measures
- Necessary to comply with legal obligations
- Based on the legitimate interest of the controllers to properly manage the relationship with guests
4. Processing methods
- Data are processed in paper and digital form, in compliance with the principles of fairness, lawfulness, transparency, and security.
- Access to data is permitted only to personnel appointed by the controllers and to specifically authorized parties.
5. Nature of data provision
The provision of mandatory personal data (name, surname, date and place of birth, identity document details) is necessary to comply with legal obligations and to correctly manage the rental contract.
Without such data, the booking cannot be completed, nor can the guest be accommodated.
The client is responsible for informing any other adult guests included in the booking about the content of this privacy notice and for obtaining their consent where necessary.
6. Communication to external parties
Data may be communicated to:
- Consultants and professionals (accountants, technicians, etc.)
- IT and management service providers, including software such as Krossbooking, only on behalf of the controllers and for rental management purposes
- Public authorities to fulfill legal obligations
- Data will not be disseminated or transferred outside the European Union.
7. Data retention period
Personal data will be retained for the time necessary to:
- Fulfill the purposes indicated above
- Comply with legal obligations (fiscal, accounting, or administrative)
- For fiscal data, retention is normally at least 10 years (private owners: according to current fiscal law; owners with VAT number: as required for businesses).
8. Rights of the data subject
At any time, it is possible to exercise the following rights (Articles 15–22 GDPR):
- Access, rectification, erasure, restriction of processing
- Data portability
- Objection to processing for legitimate reasons
- Complaint to the Italian Data Protection Authority
9. Validity of issued documents
Booking confirmations and/or payment receipts provided to guests:
- Do not have fiscal purposes
- Are not valid as fiscal documents, unless an electronic invoice is issued by parties obligated to do so (owner with VAT number)