Privacy Policy
Privacy notice regarding personal data processing under EU Regulation 2016/679 (GDPR).
This privacy notice describes how personal data collected through the Ostiense 353 Apartment website is managed. This notice is provided in compliance with obligations under EU Regulation 2016/679 (GDPR).
Data Controller
[OWNER NAME SURNAME]
Ostiense 353 Apartment
Via Ostiense 353, 00154 Rome (RM), Italy
Email: [OWNER EMAIL]
VAT / Tax Code: [CODE]
Data in square brackets are placeholders to be filled in.
Personal Data Collected
Data voluntarily provided by users
Through contact or booking request forms, we collect: first name, last name, email address, phone number, requested stay dates, number of guests, and any special requests.
Browsing data
IT systems automatically collect technical data: IP address, browser type, operating system, referring URL, visit time. This data is necessary for the technical operation of the website.
Cookies
The site uses technical cookies necessary for operation and, with user consent, analytics, marketing, and external content cookies. For more details, see our Cookie Policy.
Purposes of Processing
- Managing information and booking requests
- Execution of the short-term rental contract
- Legal and tax compliance obligations
- Service communications related to the booking
- Aggregate statistical analysis of site usage (with consent only)
Legal Basis
Contract performance: for managing bookings and stays.
Legal obligation: for tax compliance and reporting to competent authorities.
Legitimate interest: for site security and fraud prevention.
Consent: for non-essential cookies, direct marketing, and analytics.
Data Retention Period
Data is retained for the time necessary for the stated purposes: 10 years for tax compliance, 3 years for booking data post-stay for potential disputes, 12 months for browsing data. Cookies have variable duration according to the Cookie Policy.
Service Providers and Third Parties
Data may be shared with:
- Hosting provider: for web service delivery
- Smoobu: booking management and calendar platform
- Booking.com / Airbnb: for bookings made through these platforms
- Google: for analytics and maps with consent only (servers predominantly outside EU)
- Competent authorities: upon legitimate request
Transfers to countries outside the EU occur with appropriate safeguards (standard contractual clauses) where required by law.
Data Subject Rights
Under the GDPR, you have the right to:
- → Access your data
- → Request rectification
- → Request erasure ("right to be forgotten")
- → Object to processing
- → Request restriction of processing
- → Request data portability
- → Withdraw consent at any time
- → Lodge a complaint with the Data Protection Authority
To exercise your rights, contact the Data Controller at the addresses indicated above.
Complaint to the Supervisory Authority
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of the EU country where you reside.
Changes to this Notice
This notice may be updated periodically. The date of the last update is indicated below. Please check this page regularly.
Last updated: June 15, 2026