Pursuant to GDPR Art. 13
Privacy Policy
Reg. (EU) 2016/679
2. Nature of the site and data collected
This is a static informational website. It does not directly collect personal data through forms, registrations or its own tracking systems.
Personal data may be processed in the following circumstances:
- Direct contact — if the user sends an email or calls the listed contacts, the data provided (name, email, phone, message) is processed to respond to the request.
- Server technical data — the IP address and session data may be recorded in hosting server logs for security and diagnostic purposes.
- Google Maps — the Contact page embeds a map via a Google iframe. When the page loads, Google may collect technical data in accordance with its own Privacy Policy.
- Google Analytics 4 — if the user consents via the cookie banner, anonymous browsing data is collected (pages visited, sessions, device, approximate geographic area) with IP anonymisation enabled.
3. Purpose and legal basis
- Responding to contact requests — pre-contractual measures at the data subject's request (Art. 6.1.b GDPR).
- Server security — legitimate interest of the data controller (Art. 6.1.f GDPR).
- Google Maps — by loading the Contact page, the user consents to the use of the Google service. Privacy policy: policies.google.com/privacy.
- Google Analytics 4 — explicit user consent via cookie banner (Art. 6.1.a GDPR).
4. Bookings
The website does not handle bookings directly. The "Book now" button redirects to an external platform (Teamsystem Hospitality). Data entered during booking is processed by the service provider under its own privacy policy.
5. Data retention
- Emails and communications: up to 12 months, unless otherwise required by law.
- Server logs: 30 to 90 days, depending on the hosting provider's policy.
- Google Maps data: according to Google LLC's policy.
6. Recipients of data
Data is not sold or transferred to third parties for commercial purposes. It may be shared with:
- Hosting provider (technical server management)
- Google LLC (via Google Maps iframe)
- Tax or legal advisors, only where required by law
7. International data transfers
Google LLC is based in the United States. Data transfer takes place in compliance with GDPR through Standard Contractual Clauses (SCC) approved by the European Commission.
8. Your rights
Under Arts. 15–22 GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your data, as well as the right to data portability, to withdraw consent and to lodge a complaint with the Italian Data Protection Authority.
To exercise your rights: info@maisonresola.it
9. Cookies
For information on the use of cookies, please refer to our Cookie Policy.
10. Changes
The Data Controller reserves the right to update this policy. The current version is always available on this page.
Last updated: May 2026