Privacy Policy
1. INTRODUCTION
This privacy notice is provided pursuant to Regulation (EU) 2016/679 ("GDPR") and describes how personal data is collected, used, stored and protected when users visit the website, use the booking engine or send requests through the contact forms.
2. DATA CONTROLLER
The Data Controller is:
- RIPOS SRL
- Email: rispostena@gmail.com
- VAT No.: 00778620526
The website and related services are provided through the technological platform of:
- QUOVAI SRL
- VAT No.: 01871320493
3. PERSONAL DATA COLLECTED
The following personal data may be collected:
- first name and surname;
- email address;
- telephone number;
- data required to manage bookings;
- billing data;
- any information voluntarily entered in contact forms;
- technical browsing data and system logs.
Payment data is processed directly by authorized payment providers. The Data Controller does not store or directly process full payment card details.
4. PURPOSES OF PROCESSING
Personal data is processed to:
- manage requests for information and assistance;
- manage bookings and payments;
- comply with administrative, tax and accounting obligations;
- ensure the proper functioning of the website;
- perform aggregated and anonymous statistical analysis;
- send informational or promotional communications where permitted by applicable law.
5. LEGAL BASIS FOR PROCESSING
The processing of personal data is based on one or more of the following conditions:
- performance of a contract or pre-contractual measures;
- compliance with legal obligations;
- consent of the data subject, where required;
- legitimate interest of the Data Controller in system security and service improvement.
6. DATA RECIPIENTS
Data may be disclosed to parties that provide services necessary for the performance of the requested services, including:
- IT and hosting service providers;
- payment providers;
- tax, administrative and legal consultants;
- public authorities where required by law.
Such parties act either as independent data controllers or as duly appointed data processors.
7. DATA TRANSFER
Data is mainly processed within the European Union. Where some providers used by the website involve transfers to non-EU countries, such transfers will take place in compliance with Articles 44 et seq. of the GDPR and with the safeguards required by applicable law.
8. DATA RETENTION
Personal data is retained for the time necessary to achieve the purposes for which it was collected and in compliance with applicable legal obligations.
- Contact requests: up to 12 months;
- Bookings: up to 10 years for tax and accounting purposes;
- Technical data and system logs: up to 12 months;
- Data processed on the basis of consent: until consent is withdrawn.
9. SECURITY
The Data Controller adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, alteration or destruction. Communications with the website are protected by SSL/TLS encryption protocols.
10. MINORS
The services are not intended for minors under the age of 18. If the unintentional collection of data relating to minors is detected, such data will be deleted as soon as possible.
11. DATA SUBJECT RIGHTS
The data subject may exercise the rights provided for by Articles 15-22 of the GDPR, including:
- access to personal data;
- rectification;
- erasure;
- restriction of processing;
- objection to processing;
- data portability;
- withdrawal of previously given consent.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
12. COOKIES
For more information about the cookies used by the website and the related consent preferences, please refer to the Cookie Policy.
13. CONTACTS
For any request relating to the processing of personal data, the Data Controller may be contacted using the contact details provided in this privacy notice.
14. CHANGES TO THIS PRIVACY NOTICE
This privacy notice may be updated from time to time. Any changes will be published on this page.
Document identifiers
Document: Privacy Notice
Version: v2026-06-07
Effective date: 07/06/2026