Privacy Policy

Data controller

This notice (arts. 13 and 14 of Regulation (EU) 2016/679, "GDPR") covers the Paradiso Hotel Bovelacci website and the services it offers: room booking, restaurant requests, shop orders and event attendance. It does not cover third-party sites you reach through links.

Data controller: GEN-AM s.r.l., Viale 2 Giugno, 79 — 48015 Milano Marittima (RA). Email: info@hotelparadisomilanomarittima.it · PEC (certified email): gen-am@legalmail.it · VAT no. 00453170391. To exercise your rights or ask anything about your data, write to info@hotelparadisomilanomarittima.it.

What data we process

Booking data

First and last name, email, phone number (optional), stay dates, number of guests, the room and extras you chose, the amount paid and the payment reference. We also record that you stated you had read this notice, with date and time. You enter your card details directly on Stripe's payment page: the hotel does not see or store them.

Notes and health data (optional)

In the “Notes” field of the booking you may write whatever you like, including allergies, intolerances or health or mobility needs. This is special-category data (art. 9 GDPR): it is not mandatory, you should not enter it if you prefer not to, and we use it only to organise your stay. The legal basis is your explicit consent, which you give by voluntarily writing it in the field. You can withdraw it at any time by writing to us.

Requests via WhatsApp, email and external forms

If you ask for a restaurant table (first and last name, service, date, number of guests), order from the shop (name, email, optional phone, delivery address, optional gift message) or confirm your attendance at an event, the data is used to answer your request. WhatsApp and your email app open on your own device with the message already written: it is sent only when you send it. This site does not transmit or store it.

Browsing data

The site is hosted by Vercel, which records technical data for each request (IP address, browser, requested page, date and time) to deliver the service and keep it secure. Visit statistics (Vercel Analytics) are switched on only if you press “Accept” in the banner.

Purposes and legal basis

The site does not collect data for marketing, has no newsletter and does not profile users. There is no automated decision-making.

Providing your data

To book online, first name, last name and email are mandatory: without them we cannot create the booking. Phone and notes are optional. For other requests (restaurant, shop, events) the details in the forms are needed to answer you: if you do not provide them we cannot follow up. Consent to statistics is free: refusing does not limit your use of the site in any way.

Who receives your data

We share data only with the providers needed to deliver the service. We do not sell data.

We may also share data with tax and accounting advisers, and with authorities when the law requires it.

Transfers outside the European Economic Area

Some providers are based or have infrastructure in the United States (Stripe, Vercel, Meta, Google, Matterport). Transfers rely on the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework (Stripe and Vercel state that they are) or, alternatively, on the Standard Contractual Clauses approved by the Commission (art. 46 GDPR), included in their data processing agreements. You can ask us for a copy of the safeguards applied by writing to info@hotelparadisomilanomarittima.it.

How long we keep your data

Your rights

You can exercise the rights under arts. 15-22 GDPR at any time by writing to info@hotelparadisomilanomarittima.it. We reply within one month.

• access: learn whether we process your data and obtain a copy (art. 15)
• rectification of inaccurate data (art. 16)
• erasure (art. 17), except for data the law requires us to keep
• restriction of processing (art. 18)
• portability: receive the data you gave us in a structured format (art. 20)
• objection to processing based on legitimate interest (art. 21)
• withdrawal of consent at any time (art. 7.3); for statistics use “Cookie settings” in the footer; it does not affect processing already carried out

If you believe the processing breaks the law, you can lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it), or with the authority of your country of residence.

Security

The site uses encrypted connections (HTTPS). Payment cards are handled only by Stripe.

What the site uses

The site does not set cookies. It uses only the browser's local storage (localStorage), in the cases below. This is the complete list.

Your language is not stored: on your first visit the site picks it from your browser settings.

Statistics (Vercel Analytics)

We measure visits with Vercel Analytics only after you press “Accept”. Before that, and if you press “Reject”, the script is not even loaded. Vercel Analytics does not use cookies: it tells visits apart with a code calculated from the request, discarded after 24 hours, and according to Vercel it does not let anyone follow you across other sites.

Third-party content, only when you act

Matterport 3D tours load only when you press the tour button. Google Forms, WhatsApp, Instagram and Google Maps open as external links, when you choose them. These services may use their own cookies under their own notices.

How to change your choice

Press “Cookie settings” in the footer: your choice is deleted and the banner reopens. Rejecting is as easy as accepting and does not limit your use of the site. You can also clear the site's data from your browser settings.