Information on the Processing of Personal Data

Effective as of January 1, 2026

1. Introduction

This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and the Guidelines issued by the Italian Data Protection Authority.

This information describes how we process the personal data of users who visit the website www.reginahotels.it (hereinafter, the “Site”).

2. Data Controller

The Data Controller is:

CROTTO REGINA S.R.L.
Via Regina Levante, 29
22015 Gravedona ed Uniti (CO) – Italy
VAT No. 02563150131
Email: info@reginahotels.it

The Data Controller has not appointed a Data Protection Officer (DPO).

For any information or requests regarding the processing of personal data, you can contact the Data Controller directly at the contact details above.

3. Types of data processed

The Data Controller processes only personal data provided voluntarily by the user and technical browsing data.

In particular, the following may be processed:

Identification and contact data (name, surname, email, telephone number);
data provided via contact forms, information requests, reservations, table requests, and job applications;
browsing data (IP address, technical logs, cookies).

The Site does not process sensitive data pursuant to Article 9 of the GDPR or judicial data.

4. Purpose of Processing

Personal data is processed exclusively for the following purposes:

Respond to requests for information sent by the user;
Manage room or table reservation requests;
Manage spontaneous applications and CVs;
Comply with legal, fiscal, or administrative obligations;
Ensure the correct technical functioning of the Site.

Processing is carried out in compliance with the principles of lawfulness, fairness, transparency, and data minimization.

5. Legal Basis for Processing

Data processing is based on:

the execution of pre-contractual measures requested by the user;
the legitimate interest of the Data Controller in responding to requests received;
the fulfillment of legal obligations.

Providing data is optional, but failure to provide it may make it impossible to process the request.

6. Methods of Processing

Personal data is processed using electronic and organizational tools suitable for ensuring the security, integrity, and confidentiality of the data, in compliance with the security measures required by applicable legislation.

7. Data Retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected.

In particular:

Data relating to information or booking requests are retained for the time necessary to process the request;
Data relating to job applications are retained for a maximum period of 12 months;
Data required for accounting and tax obligations are retained for the terms required by law.

8. Data Disclosure

Personal data may be disclosed exclusively to:

authorized internal personnel;
tax, legal, and administrative advisors;
public authorities, where required by law.

Personal data is not disclosed to third parties for commercial or marketing purposes.

9. Data Transfer Outside the European Union

The Data Controller does not transfer personal data to countries outside the EU.

If necessary, the transfer will be carried out in compliance with Articles 44–49 of the GDPR, with adequate safeguards.

10. Rights of the Data Subject

The user may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including:

access to data;
rectification or erasure;
restriction of processing;
objection to processing;
data portability;
withdrawal of consent;
complaint to the Supervisory Authority.

Requests can be sent to info@reginahotels.it.

11. Changes to this Policy

The Data Controller reserves the right to modify this Policy at any time.

Any changes will be published on the Website, indicating the update date.