Privacy Policy and Consent for Data Processing
Last updated: [insert date]
1. Introduction
Domus Plinii (hereinafter referred to as “we” or “the Data Controller”) is committed to protecting the privacy and security of personal data of users of the website https://domusplinii.com (hereinafter, the “Site”). This privacy policy describes how we collect, use, and store personal data in compliance with the applicable data protection regulations, including:
- General Data Protection Regulation (GDPR) (EU) 2016/679 for users in the European Union.
- California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for users in the United States (California).
- Privacy laws applicable in the United Kingdom, Canada, Australia, Brazil, India, Japan, China, and other national jurisdictions.
Important note: All collected personal data is stored exclusively within our internal email systems and servers in the country of reference, with no data transfers to foreign countries.
2. Data Collected
When interacting with the Site, we may collect the following personal data:
- Identifying information: name, surname, email address, phone number.
- Browsing data: IP address, browser type, operating system, pages visited, and duration of visit (collected through cookies and analytics tools).
- Booking data: information related to requests for stays or specific services.
- Communication data: information submitted via contact forms or email.
All data is collected solely on a voluntary basis from users.
3. Purpose of Data Processing
The data collected is used exclusively for the following purposes:
- To manage information requests and bookings.
- To improve the user experience on the Site and optimize our services.
- To send communications regarding offers and updates, only with the user’s consent.
- To ensure the security of the Site and prevent unauthorized access or fraud.
- To comply with applicable legal obligations.
We do not use personal data for profiling or targeted advertising without explicit consent.
4. Data Retention
Personal data is stored exclusively in our internal email systems and servers, with no foreign transfers, according to the following retention periods:
- Contact and communication data: retained until a deletion request is made by the user.
- Browsing data (cookies): stored in accordance with our Cookie Policy [insert link].
- Booking-related data: retained for the duration necessary to fulfill the requested service and comply with legal obligations.
Users can request data deletion at any time by sending an email to [insert contact email].
5. Legal Basis for Processing
The processing of personal data is carried out in compliance with the following legal bases:
- User consent for data provided via contact forms and for marketing communications.
- Performance of a contract for managing bookings and service requests.
- Legitimate interest to ensure Site security and improve user experience.
- Legal obligation to comply with national data protection laws.
6. Data Sharing
Domus Plinii does not sell or transfer personal data to third parties, nor does it conduct international data transfers.
Data may only be shared in the following cases:
- With internal IT service providers, responsible for Site maintenance and data security.
- With public authorities, only if required by law or official investigations.
- With booking management partners, solely to fulfill the requested service.
All third parties are required to operate in compliance with local privacy laws.
7. User Rights
Users have the right to:
- Access their data and receive a copy of stored information.
- Request the correction of inaccurate or incomplete data.
- Request the permanent deletion of their personal data.
- Object to processing for legitimate reasons or request its restriction.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- File a complaint with the relevant national data protection authority.
To exercise these rights, users may send a request to [insert contact email].
8. Data Security
We implement appropriate security measures to protect personal data from unauthorized access, loss, or manipulation, including:
- Data encryption for email communications and contact forms.
- Firewalls and security protocols to protect the Site from cyber threats.
- Restricted access to data, limited to authorized personnel only.
However, no system is completely risk-free. Users are advised not to share sensitive information via unsecured email.
9. Cookies and Tracking Technologies
The Site uses cookies and analytics tools to enhance the user experience. For more details, please refer to our Cookie Policy [insert link to the cookie policy].
10. Changes to the Privacy Policy
We reserve the right to update this privacy policy to ensure compliance with applicable laws. Changes will be published on the Site with an updated revision date.
Users are encouraged to review this page periodically.
11. Contact Information
For questions regarding this privacy policy or to submit data-related requests, please contact us at:
Domus Plinii
[Physical address, if applicable]
Email: [insert contact email]