eng
Data Controller
PICAS S.R.L. Semplificata
Registered Office: Vico Cacciottoli, 43 - 80129 Naples Italy
Operational Office: Via Vincenzo Mosca, 41 – 80129 Naples Italy
VAT No.: 08634851219
Trade Name: Casina Rossa Napoli
Tel: +39 3396305200
E-mail: casinarossanapoli@gmail.com
PRIVACY POLICY
Last updated: 14 June 2026
INTRODUCTION
This policy is provided pursuant to EU Regulation 2016/679 (GDPR) and describes how the personal data of users who visit the Casina Rossa Napoli website, use booking services, fill in contact forms or interact with our social media channels are processed.
TYPES OF DATA COLLECTED
The following may be collected:
• Personal identification data (name, surname);
• Contact details (telephone, e-mail);
• Booking-related data;
• Payment data;
• Billing data;
• Browsing data;
• IP address;
• Information voluntarily provided by the user as notes (needs arising from particular disabilities, intolerances or allergies);
• Data required by public security regulations (residence, nationality, identity document, date and place of birth).
PURPOSES OF PROCESSING
The data are processed for:
a) Management of contact and information requests;
b) Management of bookings and hospitality services;
c) Compliance with tax, administrative and accounting obligations;
d) Compliance with obligations required by Public Security regulations;
e) Sending communications relating to the stay;
f) Defence of the rights of the Controller;
g) Possible sending of promotional communications subject to prior consent.
LEGAL BASIS
Processing is carried out pursuant to Art. 6 GDPR:
• performance of a contract;
• legal obligations;
• legitimate interest;
• consent of the data subject where required.
DATA RETENTION
The data will be retained for the time necessary for the purposes indicated and in any case in compliance with applicable legal obligations.
RECIPIENTS OF THE DATA
The data may be disclosed to:
• authorised staff members;
• tax and accounting consultants;
• IT service providers;
• booking system providers;
• banking institutions;
• competent authorities;
• Police Headquarters through the Alloggiati Web portal.
TRANSFER OUTSIDE THE EU
Where some services used involve transfers to non-EU countries, such transfers will take place in compliance with Articles 44 et seq. of the GDPR.
RIGHTS OF THE DATA SUBJECT
The data subject may exercise the rights provided for by Articles 15-22 of the GDPR:
• access;
• rectification;
• erasure;
• restriction;
• objection;
• data portability;
• withdrawal of consent.
The data subject may exercise their rights and/or request information regarding the processing of their personal data by contacting the Data Controller.
The GDPR grants the data subject:
1. the right to withdraw consent given, without prejudice to the lawfulness of processing based on consent before its withdrawal;
2. the right of access, namely the possibility to obtain a copy of the personal data as well as to know: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; where possible, the envisaged personal data retention period or, if this is not possible, the criteria used to determine that period; the existence of the data subject’s right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning them or to object to such processing; the right to lodge a complaint with a supervisory authority; where the data are not collected from the data subject, any available information as to their source; the existence of solely automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject;
3. the right to rectification and integration of inaccurate or outdated data;
4. the right to erasure whenever the data are no longer necessary in relation to the purposes pursued, or where the data subject decides to withdraw consent or objects to processing and there are no other legal grounds for their retention, or where the data have been unlawfully processed, or must be erased to comply with a legal obligation;
5. the right to restriction of processing if the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; if the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted; although the data controller no longer needs them for the purposes of processing, if the personal data are required by the data subject for the establishment, exercise or defence of legal claims; if the data subject has objected to processing, pending verification as to whether the legitimate grounds of the controller override those of the data subject.
In cases where the rights referred to in letters c), d), and e) are exercised, the data subject has the right to know the recipients to whom the personal data have been transmitted and the right for the Controller to inform them of the rectifications, erasures or restrictions of processing, unless this proves impossible or involves disproportionate effort.
1. the right to data portability, namely to receive the personal data concerning them in a structured, commonly used and machine-readable format, including the direct transmission of such data by the Controller to other Controllers, where the processing is carried out by automated means and is based on consent or on a contract;
2. the right to object to processing where the processing is based on the legitimate interest of the Controller, as already specified in the previous point 2;
3. the right to lodge a complaint with the competent Supervisory Authority (for Italy, the Italian Data Protection Authority, https://www.garanteprivacy.it).
Requests may be sent to: casinarossanapoli@gmail.com
COMPLAINT
The data subject may lodge a complaint with the Italian Data Protection Authority.
PRIVACY POLICY SECTION – THIRD-PARTY SERVICES
BOOKING SERVICES
Where the website uses an online booking system provided by third parties (Booking Engine), the data entered by the user during the booking process may also be processed by the service provider as Data Processor or independent Data Controller, in accordance with the relevant privacy documentation.
The user is invited to consult the privacy policies made available by the provider of the booking system used.
GOOGLE MAPS
The website may embed interactive maps through the Google Maps service provided by Google Ireland Limited.
Use of the service may involve the collection of technical data such as IP address, browsing data and information about the device used.
Further information is available in Google’s privacy policy.
RECAPTCHA
To protect contact forms from automated access and spam, the website may use the Google reCAPTCHA service.
Use of this service involves the processing of technical data necessary to verify that the user is a natural person.
SOCIAL NETWORKS
The website may contain links, buttons or widgets to social platforms such as:
• Facebook
• Instagram
• WhatsApp
• YouTube
• TikTok
• LinkedIn
Interaction with these services may involve the collection and processing of personal data by their respective operators.
The Data Controller is not responsible for processing carried out by social platforms once the user leaves the website or interacts with the related services.
FACEBOOK AND INSTAGRAM
Links to the Facebook and Instagram profiles of Casina Rossa Napoli allow users to visit the related social pages.
Use of these platforms is governed by the privacy policies and terms of use prepared by Meta Platforms Ireland Limited.
WHATSAPP
The website may offer the possibility to contact the property directly via WhatsApp.
Use of WhatsApp involves the processing of personal data by WhatsApp Ireland Limited according to its own terms and privacy policies.
YOUTUBE VIDEOS
Any video content embedded on the website via YouTube may install cookies and collect the user’s technical data.
NEWSLETTER AND MARKETING
Where the website offers a newsletter or promotional communications service, the data will be processed exclusively subject to the free, specific, informed and documentable consent of the data subject.
The user may withdraw consent at any time via the link included in the communications received or by contacting the Controller.
HOSTING AND IT INFRASTRUCTURE
The data may be processed by hosting, technical maintenance, e-mail and IT security providers appointed, where necessary, as Data Processors pursuant to Art. 28 GDPR.
INTERNATIONAL TRANSFERS
Use of certain technology and social media services may involve the transfer of data to countries outside the European Economic Area.
Such transfers take place in compliance with Articles 44 et seq. of the GDPR through the adoption of the safeguards provided for by European legislation.
BOOKING INFORMATION AND ALLOGGIATI WEB OBLIGATIONS
Casina Rossa Napoli informs that, pursuant to Art. 109 of the TULPS (Consolidated Law on Public Security) and the provisions of the Ministry of the Interior, all guests are required to provide a valid identity document at check-in.
The data collected include:
• name and surname;
• date and place of birth;
• citizenship;
• details of the identity document;
• data relating to the stay.
This information is processed exclusively to comply with legal obligations and is transmitted electronically to the Public Security Authorities through the “Alloggiati Web” system of the Italian State Police.
The provision of data is mandatory. Any refusal prevents the provision of the hospitality service.
The legal basis for processing is compliance with a legal obligation to which the Data Controller is subject pursuant to Art. 6, para. 1, letter c) of the GDPR.
The data are retained for the period provided for by current legislation and may be disclosed exclusively to the competent Authorities. The data processed in the context of public security obligations are not used for commercial or marketing purposes.
BOOKING TERMS AND CONDITIONS
ACCOMMODATION FACILITY
Casina Rossa Napoli
Managed by PICAS S.R.L. Semplificata
VAT No. 08634851219
BOOKINGS
Bookings may be made through:
• website;
• e-mail;
• telephone;
• any partner portals.
BOOKING CONFIRMATION
The booking is considered confirmed upon receipt of written confirmation and any required payment.
PRICES
All prices are expressed in Euro and include the services indicated in the offer description.
PAYMENT METHODS
The payment methods indicated on the website and during the booking process are accepted.
CHECK-IN AND CHECK-OUT
Check-in and check-out times are those communicated by the property and shown on the website.
IDENTITY DOCUMENTS
All guests must present a valid identity document for the registration obligations required by Italian law.
GUEST RESPONSIBILITY
The guest undertakes to use the property with care and to comply with the house rules.
LIMITATION OF LIABILITY
The property is not liable for disruptions caused by force majeure events, telecommunications network failures, natural events or provisions issued by the Authorities.
SOCIAL NETWORKS
The website may contain links to Facebook, Instagram, WhatsApp, Google Maps and other social platforms. By accessing these platforms, the user leaves the website and the respective privacy policies of the service operators apply.
CONTACT FORMS
Data entered in contact or availability request forms will be used exclusively to respond to the user’s requests and to manage the booking.
APPLICABLE LAW
These terms and conditions are governed by Italian law.
COMPETENT COURT
For any dispute, the Court of Naples shall have jurisdiction, without prejudice to any mandatory rights granted to consumers.