Privacy Policy

This page describes how this website (hereinafter, the “Site”) is managed with regard to the processing of personal data of visitors (hereinafter, the “Users”) who access it or use the services provided herein, pursuant to Art. 13 of Legislative Decree No. 196/2003 (“Personal Data Protection Code,” hereinafter, “Privacy Code”) and the European General Data Protection Regulation No. 679/2016 (hereinafter, “GDPR”).

This Privacy Policy applies solely to this Site and not to other websites that may be accessed by the User through links contained on this Site, which are subject to their own policies and regulations.

1) Data Controller

The Data Controller is Romantica S.r.l., located at Venezia, Dorsoduro 2785/786
C.F./P.IVA: 03030130276, Tel. 041.2421233, PEC palazzettomyvenice@pec.it.

2) Data Processor

The Data Processor is Andrea Coppetta Calzavara, contactable at: 041.2421233.

3) Types of Data Collected​

Browsing Data
For the correct operation of the Site, some IT systems automatically collect certain information, whose transmission is implicit in the use of Internet communication protocols. These are not collected to be associated with identified users but could potentially allow identification through processing and association with third-party data. This category includes IP addresses, ISP names, date and time of access, etc.

Data Provided Directly by the User
When a User voluntarily sends emails to the addresses provided by the Controller, they provide personal data, possibly including sensitive data. These data will be used solely to respond to the request or deliver the requested service.

Cookies

The Site may store navigation data through the use of cookies. The User can review the Cookie Policy by downloading it from www.myvenice.eu.

4) Purpose of Data Processing

Providing browsing data is mandatory and does not require User consent, as it is essential to execute IT protocols, obtain anonymous statistical data, and verify correct Site functionality.

Data provided by the User are processed, also with the help of IT tools, for the following purposes:

a) To acquire and confirm bookings for accommodation and related services, including any special requests or preferences.

b) To fulfill the legal obligation under Art. 109 of Royal Decree No. 773/1931 to register and communicate guest data to local police authorities.

c) To comply with administrative, accounting, and tax obligations.

d) To collect the tourist tax;

e) To speed up registration for future stays.

f) To receive calls or messages addressed to the User during their stay.

g) To send promotional or commercial messages from Romantica S.r.l., including updates on offers or holiday greetings.

h) To protect people and property through a video surveillance system in designated areas.

5) Legal Basis for Processing

The legal basis for processing browsing data is the legitimate interest of the Controller in improving Site usability and preventing unauthorized or illegal activities.

The legal basis for processing data directly provided by the User includes:

• Contractual execution (purpose a);

• Legal obligations (purposes b, c, d);

• User’s consent, which can be denied or withdrawn at any time (purposes e, f, g);

• Legitimate interest of Romantica S.r.l. in ensuring security (purpose h).

6) Nature of Data Provision and Consequences of Refusal
Browsing data are collected automatically and do not require consent.

For purposes listed in section 4, points a), b), c), d), h), data provision is mandatory. Refusal may result in inability to provide services.

In other cases, data provision is optional and will not affect services if consent is not given.

7) Processing Methods
Data processing is carried out using automated tools (e.g., electronic or telematic systems) and/or manually (e.g., paper-based) with appropriate security measures to ensure data confidentiality and integrity.

8) Data Retention

• Browsing data: retained until the User requests deletion.

• Data for purpose a): kept until check-out; some may be stored longer for legal reasons (10 years under Civil Code Art. 2220 or longer if litigation arises).

• Purpose b): not stored unless the User consents, in which case data are retained until consent is withdrawn.

• Purpose c): stored for legally required periods (typically 10 years).

• Purpose d): same as b).

• Purpose e): stored until consent is withdrawn and used for future visits.

• Purpose f): retained until check-out.

• Purpose g): stored until consent is withdrawn.

• Purpose h): video surveillance data are stored for 24 hours, extendable up to one week in case of holidays or closures, unless required by judicial authorities.

9) Data Access and Disclosure

User data may be accessed for the purposes in section 4 by:

– Employees or collaborators of the Controller (as authorized processors or administrators);

– Third-party service providers (e.g., accountants, IT providers, communication agencies) acting as external processors;

– Judicial or administrative authorities as required by law;

– Affiliated or related companies and their staff.

Without explicit consent, User data will not be disclosed or transferred to other third parties.

10) Data Processing Location

Data processing takes place at the Controller’s registered office.

11) Transfer of Data Outside the EU

User data are not transferred outside the European Union.

12) User Rights

The User has the right to:

– Access their data and receive a copy (Art. 15 GDPR);

– Request rectification or integration (Art. 16 GDPR);

– Request deletion under certain conditions (Art. 17 GDPR);

– Restrict processing under certain conditions (Art. 18 GDPR);

– Data portability (Art. 20 GDPR);

– Object to processing (Art. 21 GDPR);

– Withdraw consent at any time (Art. 7, par. 3 GDPR);

– File a complaint with the Data Protection Authority (Art. 51 GDPR).

Rights may be exercised using a downloadable form from www.myvenice.eu sent via:

– Certified email (PEC): palazzettomyvenice@pec.it

– Registered mail: Venezia, Dorsoduro 2785/786

In such cases, the Data Controller has the right to request all the information necessary to identify the Data Subject, who is required to provide it through appropriate means.

The exercise of these rights is free of charge for the Data Subject. However, if the requests are clearly unfounded, excessive, or repetitive, the Data Controller may, after assessing the complexity of the request, determine a reasonable fee to be charged. In the case of a request for access, if additional copies of personal data are requested, the Controller may charge a fee based on the administrative costs incurred.

13) Automated Decision-Making or Profiling
This Site and its Controller do not engage in automated decision-making or profiling.

14) Minors

Data must be provided by individuals over 14 years old for services offered directly (e.g., messaging, social network registration). For users under 14, parental consent is required. For other services, the valid age for consent remains 18. If data on minors are unintentionally collected without proper consent, they will be deleted.

15) Changes to This Privacy Policy

This policy may be updated over time. Users are encouraged to review it periodically. Continued use of the Site after changes implies acceptance of the updated policy.