Privacy Policy

Effective Date: April 5, 2026

Welcome to stayatcolosseum.com. Your privacy is of the utmost importance to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services for booking and staying at our properties.

1. Data Controller

The data controller responsible for your personal data is:

Business Name: Irene Vastarelli (Sole Proprietorship / Ditta Individuale)
VAT Number (P.IVA): IT1758780538
Website: stayatcolosseum.com
Contact Email: postmaster@stayatcolosseum.com

2. Personal Data We Collect

To provide our hospitality services and manage your stay, we collect the following personal information:

Identity Data: First name, last name, date of birth, and nationality.
Contact Data: Email address, phone number, and home address.
Payment Data: Information required to process payments (typically handled via secure third-party payment processors).
Legal Documentation: Copy of identity documents (required by Italian law for police reporting/Alloggiati Web).

3. Purpose of Processing

We process your data for the following reasons:

Booking Management: To process your reservation, confirm availability, and communicate with you regarding your stay.
Payment Processing: To handle transactions and billing.
Legal Obligations: To comply with Italian national security laws (reporting guest identities to the local authorities/Police) and for tax/accounting purposes.
Customer Support: To respond to your inquiries and provide assistance during your stay.

4. Legal Basis for Processing

We process your data under the following legal grounds:

Contractual Necessity: To fulfill our agreement to provide accommodation.
Legal Obligation: To comply with Italian laws regarding tourism and public safety.
Consent: When you voluntarily provide information via our contact forms.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above.

Administrative/Tax Records: Kept for 10 years as required by Italian law.
Police Reporting Data: Deleted or archived after the legal submission is complete, unless required otherwise by local regulations.

6. Data Sharing and Disclosure

We do not sell your data. We only share your information with:

Authorities: The State Police (Questura) via the “Alloggiati Web” portal, as mandated by Italian law.
Service Providers: Third-party tools for payment processing (e.g., Stripe, PayPal) or booking management systems, ensuring they are GDPR compliant.
Accountants: For tax filing and fiscal compliance.

7. Your Rights

Under the GDPR, you have the following rights regarding your data:

Access: The right to request a copy of the data we hold about you.
Rectification: The right to correct inaccurate or incomplete data.
Erasure: The right to request the deletion of your data (where legal obligations do not supersede this request).
Portability: The right to have your data transferred to another service.
Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us at postmaster@stayatcolosseum.com.

8. Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting your data against unauthorized access, loss, or alteration.

9. Cookies

Our website may use cookies to improve user experience. You can manage your cookie preferences through your browser settings.