Privacy Policy

Legal information

Luca Di Gasbarro for Casale delle Ronde B&B

Registered and operational office:
Strada Santa Maria, 469 – 04100 Latina (LT), Italy

Email: info@casaledelleronde.com
Telephone: +39 0773 644 392

CF: DGSLCU67A03H501H

Data controller

The Data Controller for personal data collected via the website https://www.casaledelleronde.com (hereinafter the "Site") is Luca Di Gasbarro, owner of Casale delle Ronde B&B, located at Strada Santa Maria, 469 – 04100 Latina (LT), Italy.

For any requests concerning the processing of personal data, you can contact the Data Controller:

• via email, to the address: info@casaledelleronde.com
• by post, to the following address: Strada Santa Maria, 469 – 04100 Latina (LT), Italy

A Data Protection Officer (DPO) has not been appointed, as such an appointment is not mandatory for the activity carried out under Article 37 of Regulation (EU) 2016/679.

Reference regulations

The processing of personal data collected via the Website is governed by:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR");
• Legislative Decree of 30 June 2003, no. 196 (Data Protection Code), as amended by Legislative Decree of 10 August 2018, no. 101, GDPR compliance;
• Provisions and guidelines of Data Protection Authority.

What is this notice

This notice (hereinafter the "Policy") aims to explain how personal data of users who consult and use the Website is processed, in accordance with the aforementioned legislation.

For the purposes of this Policy:

• For "Personal Data" It means any information relating to an identified or identifiable natural person, directly or indirectly.;
• For "Terminal" refers to the device (computer, tablet, smartphone, etc.) used to access and browse the Site;
• For "Treatment" means any operation carried out on Personal Data, such as collection, recording, storage, consultation, use, communication, or erasure.

By navigating and using the Site, the user acknowledges the contents of this notice. This notice may be updated periodically; any substantial changes will be communicated to users by publication on the Site or, where appropriate, by email.

1. What personal data is collected

The categories of data that can be collected and processed are as follows:

• Contact and identification detailsname, surname, sex, postal address, telephone number, email address, language, and country of origin;
• Booking and payment datainformation about the booked stay, data necessary for payment processing (payment data is processed by financial institutions and payment networks commissioned for this purpose, according to encryption protocols; the Data Controller does not store complete credit card details);
• Navigation and connection data: information automatically collected during navigation on the Website (IP address, browser type, pages visited);
• Geolocation data, only collected with the user's specific consent;
• Cookie preferences, as indicated in the dedicated section.

The fields marked as mandatory on the Site's forms (e.g. name and surname for booking registration) are necessary for the provision of the requested service; failure to complete them may prevent access to the service itself.

The Data Controller does not process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life), except for what may be spontaneously communicated by the user for specific needs related to their stay (e.g., special dietary requirements), which will only be processed for that purpose and with the consent of the data subject.

The Website is not intended for users under the age of 16 for account creation or direct communication; any personal data of minor guests (e.g., children included in a booking) will only be processed within the scope of the accommodation service provision, under the responsibility of the booking adult.

2. Purpose and legal basis for processing

The personal data described above may be processed for the following purposes:

Reservation Management

Processing is necessary for the performance of a contract between you and the Controller (Art. 6(1)(b) GDPR): booking management, communications relating to your stay, payment processing.

Customer assistance and communication

Data processing to respond to requests sent via the contact form or other channels is based on the performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR).

Service improvement and statistical analysis

The Data Controller may process browsing and booking data in an aggregated form to analyse the use of the Website and improve its functionality and usability, based on the legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

Marketing activities

Subject to the user's specific and optional consent (Article 6(1)(a) GDPR), data may be processed for the sending of promotional communications via email, SMS, or push notifications concerning offers, services, and initiatives of the Controller. Consent may be withdrawn at any time, without prejudice to the lawfulness of processing carried out before its withdrawal.

3. To whom may the data be disclosed

For the purposes described above, personal data may be communicated to:

• Financial institutions and payment circuits, for payment processing;
• IT and hosting service providers acting as data processors within the meaning of Article 28 of the GDPR;
• Providers of marketing, communication and statistical analysis services (e.g. web analytics tools), where used;
• Public authorities, where required to comply with a legal obligation or a court order.

The Data Controller does not transfer or sell personal data to third parties for purposes other than those indicated in this privacy policy.

Transfer of data to non-EU countries

Where some service providers (e.g. statistical analysis tools) are based outside the European Economic Area, data transfers will take place in compliance with the safeguards provided for in Chapter V of the GDPR (e.g. standard contractual clauses approved by the European Commission).

4. Data retention period

Personal data is kept for the time necessary to achieve the purposes for which it was collected, and in particular:

• Data relating to the booking and the contractual relationship are retained for 10 years from the end of the stay, in fulfilment of the obligations to preserve fiscal and accounting documentation provided for by Italian law (art. 2220 of the Civil Code and current tax legislation);
• Data processed on the basis of consent for marketing purposes are retained until consent is withdrawn, or in any case for a maximum period of 24 months in the absence of interaction from the user;
• Navigation data is stored for the time necessary for statistical purposes, in an anonymous or aggregated form where possible.

5. Rights of the data subject

As a data subject, you have the right to obtain from the Data Controller, in the circumstances provided for, access to your personal data and the following information:

• Right of access (Article 15 of the GDPR): to obtain confirmation as to whether personal data are being processed and to receive a copy thereof;
• Right of rectification (Article 16 of the GDPR): to request the rectification of inaccurate data or the completion of incomplete data;
• Right to erasure (Article 17 of the GDPR): to request the erasure of data in the cases provided for by the regulation (e.g. data no longer necessary, withdrawal of consent, unlawful processing);
• Right to restrict processing (art. 18 GDPR);
• Right to data portability (Article 20 of the GDPR): to receive one’s data in a structured, machine-readable format, or to request that it be transmitted directly to another data controller;
• Right to object (Article 21 of the GDPR): to object at any time to processing based on the Data Controller’s legitimate interests, or, without having to give any reason, to processing for direct marketing purposes.

To exercise these rights, you may contact the Data Controller:

• by email: info@casaledelleronde.com
• by post: Strada Santa Maria, 469 – 04100 Latina (LT), Italy

The Data Controller will respond to the request within the time limits laid down by current legislation (usually within 30 days).

Right to make a complaint

Without prejudice to any other administrative or judicial remedy, the data subject who considers that the processing of their personal data infringes the applicable legislation has the right to lodge a complaint with Data Protection Authority, in accordance with the procedures set out on the official website www.garanteprivacy.it.

6. Data security

The Controller shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in order to prevent the loss, unauthorised use, access, alteration or unlawful disclosure of personal data, in accordance with Article 32 of the GDPR.

However, users are still advised to take basic precautions for their own security while browsing (e.g. connecting to secure networks, using up-to-date antivirus software) and to pay attention to any suspicious communications that request sensitive personal data (e.g. banking details) in the name of the Data Controller: such requests are never made via email by the Data Controller.

7. Cookie

The Website uses technical cookies and, with the user's consent, statistical analysis and/or profiling/marketing cookies.

For detailed information on the types of cookies used, their purposes, duration, and how to manage or withdraw your preferences, please refer to the Cookie Policy, available in its full and continuously updated form on a dedicated page of the Website.

8. Changes to this notice

The Data Controller reserves the right to update this notice at any time. Any changes will be published on this page, indicating the date of the last update. In the event of substantial changes, the Data Controller may notify users also via email.

Last update: 28/07/2026