Privacy

Privacy Policy

Last Updated: 19/03/2025

This privacy policy is provided in accordance with Article 13 of EU Regulation 2016/679 (GDPR) and describes how we process the personal data of users who visit the [Website Name] and use our guest accommodation services.

1. Data Controller

The data controller is:

Cosmo Vatican Guest House
Address: Via Luigi Rizzo, 36 - 00136 Roma (RM)
Email: info@cosmovatican.it
Phone: +39 391 1690107

2. Types of Data Collected

While browsing and using our website, we collect the following data:

Browsing data (IP address, browser type, pages visited, visit duration);
Personal data provided by the user (name, surname, email, phone number, payment details, booking information);
Billing information (if required for booking purposes);
Data collected via cookies (see the cookie section).

3. Purpose and Legal Basis of Data Processing

We process personal data for the following purposes:

Managing bookings and providing services (legal basis: contract execution);
Compliance with legal and tax obligations (legal basis: legal obligation);
Service communications and customer support (legal basis: legitimate interest of the data controller);
Marketing and promotional offers, only with the user's explicit consent (legal basis: consent);
Statistical analysis and website improvement (legal basis: legitimate interest of the data controller).

4. Data Processing Methods and Retention

Personal data is processed using both electronic and paper-based tools, in compliance with the security measures required by the GDPR.
Data is retained for as long as necessary to fulfill the purposes for which it was collected, unless legal obligations require longer retention.

5. Data Communication and Disclosure

Personal data may be shared with:

Service providers (e.g., payment platforms, email service providers, booking management systems);
Competent authorities in case of legal obligations;
Third parties, only with the user's prior consent.

Personal data WILL NOT be sold or transferred to third parties for marketing purposes without explicit consent.

6. Data Transfer Outside the EU

If any service providers are located outside the European Economic Area (EEA), we ensure that data transfers comply with the GDPR, using standard contractual clauses or other appropriate safeguards.

7. User Rights

Users have the right to:

Access their data and request a copy;
Rectify inaccurate or incomplete data;
Delete their data if no longer needed or unlawfully processed;
Restrict processing under certain conditions;
Object to data processing for legitimate reasons;
Withdraw consent at any time (if processing is based on consent);
File a complaint with the Data Protection Authority (www.garanteprivacy.it).

Requests can be sent via email to info@cosmovatican.it

8. Cookies and Tracking Technologies

The website uses technical, analytical, and profiling cookies to enhance the user experience. For more details, please refer to our Cookie Policy.

9. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy. Any changes will be published on this page with the updated revision date.