Last updated: [DA COMPILARE]
This notice explains how personal data of visitors to the M&M House website, and of anyone sending an availability request, is processed under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.
1. Data controller
Marino De Rosa – M&M House, Largo San Vincenzo De Paoli 8, Rome, Italy Email: marinoderosa@libero.it
2. What data we process
- Data you send through the request form: full name, email, phone (optional), arrival and departure dates, number of guests and children, baby cot request, any message.
- Data you send when you contact us by email or WhatsApp.
- Browsing data: the systems that run the website (Netlify hosting) automatically log technical data such as IP address, browser and pages requested, for security and operational purposes.
- Visit statistics: if enabled, we use Umami, a cookie-free analytics service that does not collect identifying personal data and produces only aggregated, anonymous figures.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your availability and price request | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Managing any booking and your stay | Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) |
| Website security and operation | Legitimate interest (Art. 6(1)(f)) |
| Loading external content (Google Maps) | Consent (Art. 6(1)(a)), which you can withdraw at any time |
Providing form data is optional, but without your name, email and dates we cannot reply to your request.
4. How long we keep it
- Requests that do not lead to a booking: for as long as needed to reply, and no longer than [DA COMPILARE] months.
- Booking-related data: for the period required by tax and legal obligations.
- Technical browsing data: for the period set by the hosting provider.
5. Who we share it with
Your data is never sold or published. It may be processed on our behalf by technical providers:
- Netlify, Inc. (website hosting and form handling) – USA, with appropriate safeguards for data transfers (Standard Contractual Clauses and/or the EU-US Data Privacy Framework);
- the controller’s email provider ([DA COMPILARE]);
- Umami Software, Inc. (cookie-free statistics, if enabled);
- Google (only if you choose to load the interactive map);
- WhatsApp / Meta (only if you choose to message us on WhatsApp, in which case WhatsApp’s privacy policy also applies).
If you stay with us, some data is passed to the authorities as required by Italian law (for example guest registration with the police and tourist tax requirements).
6. Your rights
You can ask at any time to access, correct or delete your data, restrict or object to its processing, receive it in a portable format and withdraw your consent, by writing to marinoderosa@libero.it. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your country of residence.
7. Cookies
See our Cookie policy.