Privacy Policy

This privacy policy explains how Prenota Facilitata S.r.l. collects, uses, and protects information when you use our online platform and services. We are committed to protecting your privacy and handling your data transparently, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

When you use our site or services, we may collect various types of information. This includes information you provide directly to us, such as when you create an account, make a booking, contact us, or use our custom software solutions. This information may include your name, contact details (excluding email and phone in this context), payment information, and other details necessary for providing the requested services.

We also automatically collect certain technical and usage information when you access and use our service. This may include your IP address, browser type, device information, operating system, referral URLs, pages visited, time spent on pages, and clickstream data. We collect this through cookies and similar technologies.

How We Use Your Information

We use the information we collect for various purposes related to providing and improving our hospitality technology services:

• To provide, operate, and maintain our site and services, including processing bookings and managing accounts.
• To process payments and manage transactions.
• To communicate with you about your account or bookings (without using electronic communication in this specific policy context).
• To understand and analyze how you use our services, helping us to improve functionality and user experience.
• To develop new products, services, features, and functionality.
• To ensure the security and integrity of our site and services, and to detect and prevent fraud or other malicious activity.
• To comply with legal obligations and regulations.
• For marketing purposes, where we have obtained your explicit consent.

Legal Basis for Processing

We process your personal information based on several legal grounds as permitted by data protection law:

• The processing is necessary for the performance of a contract with you (e.g., to provide booking services).
• The processing is necessary for compliance with a legal obligation to which we are subject.
• The processing is necessary for our legitimate interests or those of a third party (e.g., site security, service improvement, business operations), provided these interests are not overridden by your fundamental rights and freedoms.
• The processing is carried out with your consent, where applicable (e.g., for certain marketing activities or non-essential cookies).

Sharing Your Information

We may share your information with third parties in limited circumstances:

• With service providers and subprocessors who perform functions on our behalf, such as payment processors, hosting providers, or analytics services, strictly for the purpose of providing services to you. These third parties are obligated to protect your information and use it only for the purposes for which it was shared.
• With hotels or hospitality providers directly involved in providing the services you book through our platform.
• In response to legal requests, such as subpoenas, court orders, or legal process, or to establish, protect, or exercise our legal rights or defend against legal claims.
• If we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our terms of service.
• In connection with the merger, sale, or acquisition of all or a portion of our business (your data may be transferred as part of the transaction, subject to standard confidentiality obligations).
• With your consent or at your direction.

We do not sell your personal information to third parties.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your information, we will securely delete or anonymize it.

Your Data Protection Rights

Under applicable data protection laws, you have certain rights regarding your personal data:

• The right to access your personal data.
• The right to request rectification of inaccurate personal data.
• The right to request erasure of your personal data (under certain conditions).
• The right to request restriction of processing of your personal data (under certain conditions).
• The right to object to the processing of your personal data (under certain conditions).
• The right to data portability, allowing you to receive your personal data in a structured, commonly used, machine-readable format (under certain conditions).
• The right to withdraw consent at any time where processing is based on consent.
• The right to lodge a complaint with a supervisory authority.

To exercise these rights, you may contact the data controller at the physical address provided below.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. However, please note that no method of transmission over the internet or electronic storage is completely secure.

Cookies and Similar Technologies

Our site uses cookies and similar technologies to improve your browsing experience, analyze site usage, and support the functionality of our services. You can manage your cookie preferences through your browser settings.

International Data Transfers

Your information may be stored and processed in countries outside of your own. Where this occurs, we take steps to ensure that your data is protected to the same standards as required by applicable data protection laws, such as through the use of standard contractual clauses or other approved mechanisms.

Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

Data Controller

The data controller responsible for your personal data is:
Prenota Facilitata S.r.l.
15 Viale Europa
Florence, Tuscany, 50126
Italy

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page. We encourage you to review this policy periodically.