The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation.
1. Data Controller
The Data Controller is Tiberia Retreat, with registered office at via di Monte Piano snc, 04029 Sperlonga (LT), Italy,
email: info@tiberiaretreat.com.
2. Types of Data Collected
Through the booking request form, the following personal data are collected:
- First name
- Last name
- Email address
- Phone number
Providing this data is optional, but necessary in order to process the request.
3. Purpose of Data Processing
Personal data are processed for the following purposes:
- Managing booking requests
- Contacting the user to provide information about the services offered
4. Legal Basis for Processing
The processing is based on:
- The user’s consent (Art. 6(1)(a) GDPR)
- The performance of pre-contractual measures requested by the user (Art. 6(1)(b) GDPR)
5. Processing Methods
Data are processed using electronic and/or manual tools, in compliance with the principles of lawfulness, fairness, and transparency.
Appropriate security measures are adopted to prevent unauthorized access, loss, or disclosure of data.
6. Data Retention
Personal data are retained for the time strictly necessary to handle the request and, in any case, no longer than 12 months, unless otherwise required by law.
7. Data Sharing
Data will not be disclosed.
They may be shared with third parties (e.g., technical service providers, website hosting providers) solely for operational purposes and in compliance with applicable regulations.
8. User Rights
Users may exercise their rights under Articles 15–22 of the GDPR, including:
- Access to personal data
- Rectification or erasure
- Restriction of processing or objection
- Data portability
Requests can be sent to: info@tiberiaretreat.com
Users also have the right to lodge a complaint with the competent Data Protection Authority.
9. Cookies
This website uses only technical cookies necessary for its proper functioning. No profiling cookies are used