PRIVACY POLICY – Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679
The Data Controller is Active Media Srl, with registered office at Via Nazionale 98/B, 89812 Pizzo (VV), Italy, VAT no. 03312370798.
Email for any communication regarding privacy: [email protected]
.
Personal data are collected and processed when guests make a reservation, complete online check-in, stay at the facility, or communicate with the staff. The categories of data processed may include identification data, contact details, booking and stay information, payment details limited to the transaction, browsing data, and images recorded by video surveillance systems in common areas. Sensitive or special categories of data are not processed.
Data are processed for the following purposes: management of reservations, check-in and accommodation; compliance with administrative, fiscal, and legal obligations; communications with guests by email, telephone, or WhatsApp; protection of property and security through video surveillance; sending of promotional messages, newsletters, and special offers upon explicit consent; statistical analysis and service improvement through technical and analytical cookies. The legal bases of processing are the performance of a contract, compliance with legal obligations, explicit consent, and the legitimate interest of the controller.
Data are processed using manual, electronic, and digital tools in accordance with the principles of lawfulness, fairness, transparency, relevance, and security established by Regulation (EU) 2016/679. Appropriate technical and organizational measures are applied to ensure data protection against unauthorized access, alteration, or loss.
Personal data may be communicated to authorized staff and external parties collaborating with the controller for purposes related to the provision of services, such as administrative or technical consultants, IT service providers, booking platforms, payment institutions, and public authorities where required by law.
Among the main external processors, where applicable, are Solutions Plus S.r.l. (VAT no. 07375150724), operator of the KrossBooking platform used for managing reservations, and Nexi Payments S.p.A., for the processing of electronic payments. The updated list of external processors is available upon request at [email protected]
.
Data are not transferred outside the European Economic Area. Should future processing involve transfers to non-EU countries, such transfers will take place in full compliance with Articles 44 et seq. of Regulation (EU) 2016/679.
Personal data will be retained only for the period necessary to achieve the purposes for which they were collected. Specifically, administrative and fiscal data are retained for ten years; booking and communication data for up to twenty-four months after the end of the stay; marketing and newsletter data for twenty-four months from consent; video surveillance images for up to seven days, unless extended due to investigations or specific events; and technical browsing data for twelve months or in anonymized form. After these periods, data will be deleted or irreversibly anonymized.
Data subjects have the right to access their personal data, request rectification or erasure, restrict or object to processing, and request data portability. They may also withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Requests should be sent to [email protected]
. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it
).
The common areas of the facility may be subject to video surveillance for security and asset protection purposes. Images are stored for a maximum of seven days, unless extended due to specific security needs or requests by competent authorities.
The website uses technical cookies necessary for its proper functioning and, subject to user consent, analytical and profiling cookies from third parties such as Google Analytics. Analytical and marketing cookies are installed only after explicit consent through the cookie management banner. Users may modify their preferences at any time through browser settings or the cookie management section. Further details are available in the Cookie Policy section of the website.
The services provided are not intended for individuals under the age of 16. Any data provided by minors will be deleted as soon as the controller becomes aware of it.
This notice may be updated to reflect legislative or technical changes. The latest version is always available on the website www.4starbologna.com
in the “Privacy Policy” section.
The processing of personal data is governed by Regulation (EU) 2016/679, Legislative Decree no. 196/2003 and subsequent amendments, as well as the provisions and guidelines of the Italian Data Protection Authority.
Last update: October 2025
Data Controller: Active Media Srl, Via Nazionale 98/B, 89812 Pizzo (VV), Italy
Email: [email protected]