Privacy Policy
Last updated: April 2026 — pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/20181. Data Controller
Domus San Pietro S.R.L.
Piazza del Risorgimento 59, 00193 Rome (RM) — Italy
Privacy enquiries: domusportaangelica@gmail.com
"Processing" means any operation performed on personal data: collection, recording, storage, consultation, communication, erasure. The Data Controller determines the purposes and means of processing.
2. Categories of data processed
a) Technical browsing data
The computer systems that host the website automatically collect data whose transmission is implicit in the use of internet protocols: IP address, browser type, operating system, referring page, and time of request. These data are not linked to identified individuals and are used solely for website security and anonymous aggregated statistics.
b) Data transferred to Google (Maps and Fonts)
This website uses:
- Google Maps (Contact section) — embedding the map automatically transmits your IP address to Google LLC servers each time the page is loaded.
- Google Fonts (typographic fonts) — fonts are loaded from Google servers, which involves the transmission of your IP address.
Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) in the proper presentation and functionality of the website. Google LLC is a non-EU recipient (see section 5).
c) Data voluntarily provided (email and phone)
When you contact us by email at domus.roma.booking@gmail.com or by phone at +39 392 896 3346, we collect the data you provide: your name, email address or phone number, message content, and any information about your requested stay.
Legal basis: Art. 6(1)(b) GDPR — processing necessary for the performance of pre-contractual measures or the execution of a contract to which you are party.
d) Booking data (Octorate)
Direct bookings are made through the external platform Octorate (octorate.com), reached by clicking the "Book" button. Octorate acts as an independent data controller for the data collected on its own platform (name, surname, email, payment details, stay dates). Please refer to Octorate's Privacy Policy for full details. The Domus Porta Angelica website does not receive or store any data entered on Octorate.
3. Purposes of processing
| Purpose | Legal basis |
|---|---|
| Responding to information requests and enquiries | Art. 6(1)(b) — pre-contractual measures |
| Managing the booking and stay | Art. 6(1)(b) — performance of a contract |
| Compliance with fiscal and accounting obligations | Art. 6(1)(c) — legal obligation |
| Website functionality (maps, fonts) | Art. 6(1)(f) — legitimate interest |
| Security and fraud prevention | Art. 6(1)(f) — legitimate interest |
Data are not used for marketing, profiling, or sending unsolicited commercial communications.
4. Recipients of personal data
Personal data may be shared with the following categories of recipients:
- Google LLC — for the operation of Google Maps and Google Fonts embedded in the website; and for the Gmail email service used for booking communications.
- Hosting provider — the web hosting service provider, acting as a data processor under Art. 28 GDPR.
- Public authorities — only in cases required by law (e.g. tax authorities, law enforcement).
Data are not sold, transferred, or communicated to third parties for commercial or marketing purposes.
5. International data transfers
Google LLC is based in the United States of America. Data transfers to Google LLC are carried out in compliance with the safeguards provided under Chapter V of the GDPR, through Standard Contractual Clauses approved by the European Commission and within any applicable adequacy frameworks.
For more information on the safeguards adopted by Google: policies.google.com/privacy.
6. Data retention periods
| Category of data | Retention period |
|---|---|
| Email communications (enquiries) | For the time necessary to handle the request, and no longer than 12 months after the conclusion of the relationship |
| Documents relating to bookings and stays | 10 years from the date of the service (fiscal and accounting obligations) |
| Technical browsing data (security logs) | Up to 12 months |
Once these periods have elapsed, data are deleted or irreversibly anonymised.
7. Your rights as a data subject
Under Articles 15–22 of the GDPR, you have the right to:
- Access (Art. 15) — obtain confirmation of processing and a copy of the data concerning you;
- Rectification (Art. 16) — obtain correction of inaccurate or incomplete data;
- Erasure (Art. 17) — obtain deletion of your data ("right to be forgotten"), in the cases provided for by law;
- Restriction (Art. 18) — obtain restriction of processing in certain circumstances;
- Data portability (Art. 20) — receive your data in a structured, machine-readable format, where processing is based on consent or a contract;
- Objection (Art. 21) — object to processing based on legitimate interests.
To exercise your rights, please write to: domusportaangelica@gmail.com
We will respond within 30 days of receiving your request (extendable by a further 60 days in particularly complex cases).
8. Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Garante per la protezione dei dati personali (Italian Data Protection Authority)
Piazza Venezia 11, 00187 Rome — Italy
Tel.: +39 06 696771
Web: www.garanteprivacy.it
You may also contact the supervisory authority of your country of residence within the EU.
9. Changes to this policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time, including following regulatory changes. The updated version is always available on this page with the date of the latest update. We encourage you to check this page periodically.