Privacy Policy

Pursuant to Regulation (EU) 2016/679 (“GDPR”), this page describes how the personal data of users who visit the website of NER 26 HOTEL SRL are processed.

Data Controller

The Data Controller is:

NER 26 HOTEL SRL
Via di Santa Croce in Gerusalemme 40,
00185 – Rome (RM) – Italy
VAT No. 15281861003
E-mail: [insert privacy contact e-mail]

Types of Data Collected

The website may collect the following categories of personal data:

Browsing data (e.g. IP addresses, log data, connection details) through automatic systems.
Data voluntarily provided by the user (e.g. name, surname, e-mail, telephone) via contact forms, booking requests, or newsletter subscriptions.
Cookies and tracking tools: for further details, please refer to the Cookie Policy.

Purposes of Processing

Personal data collected are processed for the following purposes:

To respond to requests for information or quotations.
To manage bookings and services requested by users.
To comply with legal, tax, and administrative obligations.
To send promotional communications and newsletters (subject to consent).
To ensure website security and improve the browsing experience.

Legal Basis for Processing

Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
Compliance with legal obligations (Art. 6.1.c GDPR).
Legitimate interest of the controller for security and fraud prevention (Art. 6.1.f GDPR).
User consent for marketing and newsletter purposes (Art. 6.1.a GDPR).

Methods of Processing

Data are processed using electronic and telematic tools, in compliance with GDPR security measures, and stored for the time strictly necessary to achieve the purposes described above.

Data Communication and Disclosure

Personal data may be communicated to:

Collaborators and employees authorized by the Data Controller.
Service providers, hosting providers, and IT system managers.
Public authorities for legal obligations.
Personal data will not be disclosed or transferred outside the EU unless adequate safeguards are adopted in compliance with the GDPR.

Rights of the Data Subject

Users have the right to:

Access their personal data.
Request rectification or erasure of their data.
Restrict or object to processing.
Request data portability.
Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
Lodge a complaint with the Italian Data Protection Authority.

Requests should be sent to the Data Controller at the following e-mail: [insert dedicated privacy e-mail].

Updates

This privacy notice may be subject to changes and/or updates. Users are encouraged to check it regularly.