This notice explains how Terra e Turismo S.r.l. processes the personal data of people who visit www.lejardinromain.com (the “Website”) or contact the “Le Jardin Romain” apartment. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”). The use of cookies is described in the Cookie Policy. In case of discrepancy, the Italian version prevails.
1. Data controller
Terra e Turismo S.r.l. - registered office: Via dei Fontanili, 11/A, 20141 Milano (MI), Italy
VAT number and Tax code 11153860967 - REA MI - 2583218
Certified e-mail (PEC): terraeturismo@pec.it - Phone: (+39) 0942 896609
Contact form: terraeturismo.com/contattaci
2. Data we process
- Browsing data: IP address, date and time of the visit, pages requested, browser and device type. They are collected automatically by the systems that run the Website.
- Data you give us: name, contact details and content of the requests you send by phone, WhatsApp, e-mail or contact form; dates of stay and number of guests entered in the “Check availability” form, which sends them to the booking website terraeturismo.com, run by the same Controller.
- Guest data: when you book, the data needed for your stay, for payments and for legal obligations, including identity document details that must be reported to the police.
- Cookies and similar technologies: as described in the Cookie Policy.
The Website does not require registration and is not intended for children under 14. Please do not send us special categories of data (for example health data) unless strictly necessary for your stay, such as accessibility needs.
3. Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running the Website, keeping it secure and preventing abuse | Legitimate interest of the Controller (Art. 6(1)(f) GDPR) |
| Answering your requests and checking availability | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Managing your booking and stay | Performance of a contract (Art. 6(1)(b) GDPR) |
| Tax, accounting and public security obligations (guest registration, Art. 109 TULPS) | Legal obligation (Art. 6(1)(c) GDPR) |
| Protecting the Controller's rights in case of disputes | Legitimate interest of the Controller (Art. 6(1)(f) GDPR) |
| Aggregated visit statistics (Google Analytics 4) | Consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time |
| YouTube video playback | Consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time |
We do not send marketing communications, we do not carry out profiling and we do not take decisions based solely on automated processing.
4. Do you have to provide your data?
No, but without the necessary data we cannot answer your requests or manage your booking. Guest data required by law are mandatory in order to stay at the property.
5. Who we share data with
Data are processed by authorised staff of the Controller and may be shared, only for the purposes above, with:
- technical service providers (hosting, e-mail, maintenance), appointed as data processors under Article 28 GDPR;
- booking platforms and payment providers, when you use them to book or pay;
- tax and accounting advisors;
- public authorities, where required by law (for example the police for guest registration).
Third-party services activated only with your consent (Google Analytics, YouTube) are described in the Cookie Policy. Data are never published or sold.
6. Transfers outside the European Union
Some providers, such as Google, may process data in the United States. In such cases the transfer is based on the European Commission adequacy decision on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses (Articles 45 and 46 GDPR).
7. How long we keep data
- Browsing data: up to 6 months, unless needed to investigate offences.
- Information requests not followed by a booking: up to 12 months.
- Booking and stay data: 10 years, for civil and tax obligations.
- Cookie preferences and statistical data: for the periods stated in the Cookie Policy.
8. Your rights
At any time you can ask the Controller for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before. Write to the PEC address terraeturismo@pec.it or use the contact form: we will reply within 30 days.
If you believe that the processing infringes the law, you can lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), Piazza Venezia 11, 00187 Rome - www.garanteprivacy.it, or with the authority of your country of residence.
9. Security
The Website uses an encrypted connection (HTTPS). We take appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure.
10. Changes
We may update this notice, for example following changes in the law or in the services we offer. The current version is always published on this page, with the date of the last update.
Last updated: 3 November 2026