Privacy Policy

## Data Controller

The data controller is **Roma Segreta Apartments**, located at **Via della Polveriera 40, 00184 Rome, Italy**.  

VAT number: **IT18168981001**.  

For privacy-related questions, you can contact us at **info@romasegretapartments.com** or by phone at **+39 327 912 7457**.

## Information Collected

We collect personal information only when voluntarily provided. This may include your name, email address, phone number, and details submitted through reservation, contact, or inquiry forms.

## How Information Is Used

Your information is used only to respond to inquiries, coordinate reservations, manage guest communication, and provide the services you request. It is not used for unsolicited marketing or unrelated communications.

## Legal Basis for Processing

We process personal data on the basis of one or more of the following legal grounds under the GDPR: your consent, the performance of a contract or pre-contractual measures related to a booking request, compliance with legal obligations, and our legitimate interest in managing guest communication and website operations.

## Data Storage

Personal information is stored securely using reasonable technical and organizational measures. Access is limited to authorized persons and service providers who need the data to operate the website or manage reservations.

## Sharing Information

Your information is never sold or rented. It may be shared only when necessary to provide requested services, to manage reservations, to comply with legal obligations, or with carefully selected third-party service providers acting on our behalf.

## Cookies and Analytics

Roma Segreta Apartments may use essential cookies required for website functionality. If analytics, tracking tools, or non-essential cookies are used, they are activated only in accordance with applicable consent requirements. Any such tools are used to improve website performance and user experience.

## Third-Party Services

We may use third-party tools such as form handlers, booking tools, hosting providers, or analytics services to support website functionality and operations. Where these providers act as service providers on our behalf, they process personal data under applicable data protection obligations and contractual safeguards.

## International Data Transfers

Some service providers may process data outside the European Economic Area. Where this happens, appropriate safeguards are used in accordance with applicable data protection law, such as standard contractual clauses or equivalent legal mechanisms.

## Data Retention

Personal data is retained only for as long as necessary to respond to inquiries, manage reservations, comply with legal obligations, or maintain relevant guest communication. You may request deletion where applicable by law.

## Automated Decision-Making and Profiling

Roma Segreta Apartments does not use your personal data for automated decision-making or profiling.

## Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and the right to withdraw consent where consent is the legal basis for processing. You also have the right to lodge a complaint with the Italian Data Protection Authority, the **Garante per la Protezione dei Dati Personali**.

## Policy Updates

This privacy policy may be updated from time to time to reflect legal, operational, or website changes. Continued use of the website does not waive your rights under applicable law, and the latest published version will apply.

## Contact

For any question regarding this policy or the handling of your personal data, please contact Roma Segreta Apartments at **info@romasegretapartments.com** or **+39 327 912 7457**.