Privacy Policy

This policy describes how the personal data of users browsing the website hotellarusticana.it and of those who contact the hotel is processed, in accordance with Regulation (EU) 2016/679 (the "GDPR").

1. Data controller

2. What data we collect

This is a static website with no registration, no user account and no online purchase forms. Personal data is processed only in the following cases:

• Contact details provided voluntarily — when you email us, message us on WhatsApp or call us to request information or make a booking, we process the data you share (name, contact details, dates of stay, any requests).
• Browsing data — the website's systems and software acquire, during normal operation, certain data whose transmission is implicit in the use of internet protocols (e.g. IP address, browser type, request times). This data is used solely to obtain anonymous statistical information on the use of the site and to ensure it works correctly.
• Booking and stay data — to process the booking and meet legal obligations (including the reporting of guest data to the Public Security Authorities under art. 109 of the Italian Consolidated Law on Public Security), we process the personal and identity-document data of guests.

3. Purposes and legal basis

• Responding to enquiries and managing bookings — legal basis: performance of pre-contractual measures and of the contract (art. 6.1.b GDPR).
• Complying with legal obligations (tax, administrative, public security) — legal basis: legal obligation (art. 6.1.c GDPR).
• Ensuring the security and correct operation of the website — legal basis: legitimate interest of the controller (art. 6.1.f GDPR).
• Loading the Google Maps map — only with your explicit consent, expressed by clicking the dedicated button (art. 6.1.a GDPR). See the Cookie Policy.

4. Third-party services

To provide certain features we use the following external services, which may process your data as independent controllers:

• Google Maps (Google Ireland Ltd.) — the map on the Contact page is loaded only after you click. By loading it, your IP address is transmitted to Google. Google's privacy policy.
• WhatsApp (Meta Platforms Ireland Ltd.) — if you choose to contact us via WhatsApp, data processing is also governed by WhatsApp's privacy policy.

The website's fonts are hosted locally on our servers: displaying them does not transmit any data to Google.

5. How data is processed

Data is processed using electronic and paper-based tools, with logic strictly related to the stated purposes and with security measures appropriate to prevent its loss, misuse and unauthorised access.

6. Data retention

Contact data is kept for as long as necessary to handle your request. Booking and stay data is kept for the period required by law (in particular tax and administrative obligations, generally 10 years). Browsing data is kept for the strictly necessary time.

7. Disclosure

Data may be disclosed to parties carrying out support activities (e.g. consultants, technical service providers) and to the competent Authorities where required by law. Data is not disseminated nor transferred outside the European Union, except as may be connected to the use of the third-party services indicated above.

8. Your rights

As a data subject you may exercise at any time the rights under arts. 15–22 of the GDPR: access, rectification, erasure, restriction, objection, data portability and withdrawal of consent (where given). To exercise these rights, write to info@hotellarusticana.it.

You also have the right to lodge a complaint with the supervisory authority — the Italian Data Protection Authority.

9. Changes

The controller reserves the right to amend this policy, publishing any changes on this page. Please review it periodically.

Last updated: June 2026.