PRIVACY POLICY

pursuant to Regulation (EU) 2016/679 (GDPR)

The Data Controller of personal data is:

Imoricon
Sole proprietorship – Property Manager acting under a mandate with representation
VAT No.: [ ]

Email: [[email protected]]
Phone: [phone number]

The Data Controller manages properties for short-term/tourist rentals in the name and on behalf of the owners, based on a specific mandate with representation.

Types of Personal Data Processed

The personal data processed may include:

• personal identification data (first name, last name, date and place of birth)
• contact details (email address, phone number)
• identity document data
• stay-related data
• payment data
• website browsing data

Purposes of Data Processing

Personal data are processed for the following purposes:

• managing information requests and bookings
• concluding and performing short-term rental contracts
• fulfilling fiscal, administrative, and accounting obligations
• complying with legal requirements (communications to the Police Headquarters, ISTAT, and other competent authorities)
• managing payments
• providing assistance during the stay
• protecting the rights of the Data Controller
• subject to consent, sending informational or promotional communications

Legal Basis for Processing

The processing of personal data is based on:

• the performance of a contract or pre-contractual measures
• compliance with legal obligations
• the data subject’s consent, where required

Processing Methods

Personal data are processed in accordance with the principles of lawfulness, fairness, and transparency, using electronic and/or paper-based tools, with appropriate security measures to ensure data confidentiality and integrity.

Data Retention Period

Personal data will be retained:

• for the time necessary to perform the contract
• for the periods required by tax and civil law
• until consent is withdrawn, where applicable

Data Disclosure

Personal data may be disclosed to parties acting as Data Processors, including:

• Lodgify
• Airbnb
• Booking.com
• Stripe, PayPal, or other payment service providers
• tax and accounting consultants
• IT service providers
• public authorities, where required by law

An updated list of Data Processors is available upon request.

Data Transfers Outside the EU

Some service providers (e.g. Airbnb, Google) may transfer personal data to countries outside the European Union. In such cases, the transfer is carried out in compliance with Articles 44 et seq. of the GDPR, through appropriate safeguards.