Information on the processing of personal data pursuant to Article 13 of EU Regulation 2016/679 (GDPR)1.

1. Data controlloller

The Data Controller of the personal data collected through the website www.aureadimore.it:

Aurea Dimore S.r.l.
P. IVA 02843600228
Email: info@aureadimore.it
Telefono: +39 340 6867804

2. Types of data collected

During normal navigation of the site and use of its services, the Data Controller may collect the following categories of data:

• Browsing data: IP addresses, browser types, operating system, and other parameters relating to the device used, collected automatically by the site’s computer systems during their normal operation;
• Data provided voluntarily by the user: identification and contact data (for example, name, surname, email address, telephone number) provided spontaneously by writing to the email address or telephone number indicated on the site to request information or make a reservation;
• Stay data: if a reservation is made, the personal and documentary data of guests required to comply with public safety laws (e.g., notification to the Police Headquarters’ Guest Portal) and tourist tax;
• Cookies and similar technologies: for details, please refer to the Cookie Policy.

3. Purpose of processing and legal basis

Personal data are processed for the following purposes:

• respond to requests for information and manage contact with users, based on the implementation of pre-contractual measures adopted at the request of the interested party (Article 6.1.b GDPR);
• manage the booking and execution of the tourist rental contract, based on the execution of a contract to which the data subject is a party (Article 6.1.b GDPR);
• fulfill legal obligations regarding public safety, tax, and tourist tax (e.g., communications to the Police Headquarters, the Municipality, and the Revenue Agency), based on the fulfillment of a legal obligation (Article 6.1.c GDPR);
• perform aggregate statistical analyses on site usage via Google Analytics, based on user consent (Article 6.1.a GDPR), collected via the dedicated cookie banner;
• protect the Data Controller’s rights in court, based on the Data Controller’s legitimate interest (Article 6.1.f GDPR).

Providing data is optional for information requests, but failure to provide it may make it impossible to respond to the request. However, providing data is required for the conclusion and execution of the tourist rental agreement and for related legal obligations.

4. Methods of processing

The processing is carried out using computerized and/or paper-based tools, using methods strictly related to the indicated purposes and, in any case, in a way that guarantees the security, integrity, and confidentiality of the data, in compliance with the organizational, physical, and logical measures required by applicable regulations.

5. Communication and transfer of data

Personal data may be disclosed, for the purposes indicated above, to the following parties:

• technical and IT service providers (e.g. website hosting and management services);
• consultants and professionals (e.g. accountants) for tax and administrative compliance;
• competent public authorities (e.g. Police Headquarters, Municipality, Revenue Agency) for the fulfillment of legal obligations;
• Google Ireland Limited / Google LLC, as provider of the Google Analytics and Google Maps service.

Some of these entities, particularly Google LLC, are based in the United States; any transfer of data to non-EEA countries is based on adequate safeguards provided by the GDPR, such as the Standard Contractual Clauses adopted by the European Commission, as indicated in the privacy policies of the respective providers.

The data will not be disclosed in any way.

6. Retention period

Data is retained for the time strictly necessary to achieve the purposes for which it was collected, in compliance with legal requirements. Specifically: data relating to simple requests for information are retained for the time necessary to process the request; data relating to contracts and tax obligations are retained for the terms established by civil and tax regulations (typically 10 years); data relating to public safety obligations are retained for the terms established by the relevant legislation..

7. Rights of the interested party

As a data subject, you have the right to obtain from the Data Controller at any time, within the limits and under the conditions set forth in Articles 15-22 of the GDPR:

• confirmation of the existence of processing and access to your personal data (right of access);
• the rectification of inaccurate data or the integration of incomplete data;
• the deletion of data, in the cases provided for by the legislation (right to be forgotten);
• the limitation of processing;
• data portability, where technically possible;
• opposition to the processing, in whole or in part;
• the withdrawal of consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

To exercise these rights, please write to info@aureadimore.it.

Resta inoltre fermo il diritto di proporre reclamo all’Autorità Garante per la protezione dei dati personali (www.garanteprivacy.it), qualora si ritenga che il trattamento dei propri dati sia contrario alla normativa vigente.

8. Minors

The site is not intended for persons under the age of 16, and the Data Controller does not knowingly collect data relating to minors without the consent of the person exercising parental responsibility.

9. Cookie

For detailed information on the cookies and tracking technologies used by the site, please refer to the Cookie Policy.

10. Changes to this policy

The Data Controller reserves the right to make changes to this policy at any time, giving notice to users on this page. Please check this page frequently, referring to the last modification date indicated at the bottom.

Last updated: November 12, 2026