Legal

Privacy Policy

Last updated: November 2026

This is a courtesy translation. In case of any discrepancy, the Italian version prevails.

This policy explains how Aria Living Collection B&B (the “Controller”) processes the personal data of visitors to arialivingcollection.it and of guests who contact us about availability or a stay, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

Ilaria Genovesi, owner of Aria Living Collection B&B
Via Colle la Torre 8, 00036 Palestrina (RM), Italy
Email: booking@arialivingcollection.it

2. What we process and why

2.1 Browsing the site

The service that hosts the site (Cloudflare) automatically logs some technical data needed to serve the pages and protect them from abuse: IP address, browser type, pages requested and access times. The legal basis is our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).

2.2 Usage statistics (Umami Analytics)

The site uses Umami, a traffic analytics service that uses no cookies and produces only aggregated statistics (pages visited, referring site, browser and operating system, country). Your IP address is used only briefly, to estimate your country and compute a temporary visit identifier: it is not stored in the statistics and cannot identify you. The legal basis is our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

2.3 Availability requests and email

The email buttons on the site send nothing to the website: they open a draft in your own email app, which goes out only if you decide to send it. If you write to us, we process what your message contains (name, email address, dates, number of guests and anything else you tell us) to answer your request. The legal basis is taking steps at your request before a contract (Art. 6(1)(b) GDPR). We keep these emails for 24 months unless the request leads to a stay.

2.4 Your stay

For your stay we process the data needed for the booking and the data required by law, including the identity document details that accommodation providers must report to the police (Art. 109 of the Italian Consolidated Law on Public Security). The legal basis is performance of the contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR). Tax and accounting records are kept for 10 years.

3. Who else processes your data

We never sell or hand over your data for anyone else’s purposes. It may be processed by:

4. Transfers outside the EU

Cloudflare runs a global network and is certified under the EU-U.S. Data Privacy Framework, with the European Commission’s Standard Contractual Clauses. Our email is handled by Aruba in Italy. Umami stores the statistics in the European Union; Umami Software, Inc. is based in the United States, and any transfers rely on the European Commission’s Standard Contractual Clauses.

5. Your rights

You have the right to:

To exercise your rights, write to booking@arialivingcollection.it. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

6. Cookies

This site uses no cookies. See the Cookie Policy for details.

7. Changes

We may update this policy. The current version is always on this page, with the date of the last update.

8. Photo credits

Some photographs on the Explore the area page come from Wikimedia Commons and are used under the terms of their respective Creative Commons license. The images have been cropped, resized and re-encoded from the original.

Back to home