Privacy Policy
This Privacy Policy explains how Riflessi Romani processes personal data collected through the availability request form on this website.
This notice applies to the website www.riflessiromani.it and to requests sent through the availability/contact form. It does not apply to bookings, payments or communications managed directly through third-party platforms such as Airbnb, which are governed by their own privacy policies.
1. Data Controller
The Data Controller is Riflessi Romani. For privacy-related requests, you can write to: riflessiromani@gmail.com.
If the accommodation is managed by an individual owner or by a business entity, the exact legal name of the Data Controller should be added here before publication.
2. Personal data processed
Through the availability request form, we may collect the following information:
- first name and surname;
- email address;
- telephone number, if provided;
- check-in and check-out dates;
- number of guests subject to city tax;
- reason for the stay, if selected;
- any additional information voluntarily entered in the message field.
3. Purposes of processing
Personal data is processed for the following purposes:
- to reply to availability and information requests;
- to prepare an indicative estimate for the stay;
- to manage pre-booking communications with the guest;
- to comply with legal, tax or administrative obligations, where applicable;
- to protect the rights of the Data Controller in case of disputes or misuse of the website.
4. Legal basis
The processing is based on:
- the need to take steps at the request of the user before entering into a possible booking agreement;
- compliance with legal obligations, where applicable;
- the legitimate interest of the Data Controller in managing requests, preventing misuse and protecting their rights.
5. Nature of data provision
Providing the data marked as required in the form is necessary to send the availability request and receive a reply. Failure to provide such data may make it impossible to process the request. Optional information may be omitted.
6. How data is processed
Personal data is processed using electronic tools and, where necessary, manual procedures. Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, misuse or disclosure.
7. Recipients and service providers
Personal data may be accessed by persons authorised to manage availability requests and by technical providers used to operate the website and the request form. The form may be managed through an external form-processing provider, such as Formspree or a similar service.
Personal data is not sold and is not used for unsolicited marketing communications.
8. Transfers outside the European Economic Area
Some technical providers may process data outside the European Economic Area. Where this occurs, the Data Controller will rely on safeguards provided under the GDPR, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.
9. Data retention
Personal data submitted through the form is retained for the time necessary to reply to the request and manage any subsequent booking-related communication. Data may be retained for a longer period where required by law or where necessary to protect the rights of the Data Controller.
10. Cookies and tracking tools
This website does not use its own profiling tools, Google Analytics, Meta/Facebook Pixel or remarketing. The home page does, however, include Airbnb’s official listing preview. Its script and content are loaded from airbnb.it. When the preview loads, Airbnb may receive technical data such as the IP address, browser and device, and may use cookies or similar technologies under its own policies. For details, see Airbnb’s Privacy Policy.
11. Rights of the data subject
Under the GDPR, users may exercise, where applicable, the following rights:
- right of access to personal data;
- right to rectification of inaccurate data;
- right to erasure;
- right to restriction of processing;
- right to object to processing;
- right to data portability, where applicable;
- right to withdraw consent, where processing is based on consent.
Requests can be sent to: riflessiromani@gmail.com.
12. Right to lodge a complaint
Users also have the right to lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali.
13. Changes to this Policy
This Privacy Policy may be updated to reflect changes to the website, the services offered or applicable legal requirements. The latest version will always be published on this page.