Privacy Policy
Privacy notice on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)
Last updated: 08/07/2026
This privacy notice describes how the personal data of users who visit the website www.martalake.it and who use the services offered by Marta Lake — Albergo Diffuso Marta are processed.
1. Data Controller
Accommodation facility: Albergo Diffuso Marta, Via G. Marconi 58 — 01010 Marta (VT). CIN: IT056034A1RJ73ZYZR. Email: info@martalake.it. Phone: +39 329 660 6799
2. Types of data processed
a) Browsing data
The IT systems and software used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (IP addresses, time of the request, method used, size of the file obtained, server response code, browser and operating system). This data is used solely to obtain anonymous statistical information on the use of the site and to verify that it is functioning correctly.
b) Data provided voluntarily by the user
Through the forms on the site we collect the data that the user enters voluntarily:
- Table booking form (Locanda Amalasunta): full name, email, telephone, desired date and time, number of people, occasion, any special requests.
- Itinerary information request form: tour of interest, full name, email, telephone, number of participants, preferred date, message.
- Direct contact: the data communicated by telephone, email or messaging to the number +39 329 660 6799.
c) Data collected through third-party services
- Accommodation bookings: online room bookings are made through the Beddy booking engine (martalake.beddy.io), which acts as an independent data controller or processor in accordance with its own privacy notice, available on the provider’s website.
- Digital menu: the Locanda Amalasunta menu is consulted on the iPratico platform, subject to the respective provider’s privacy notice.
3. Purposes and legal bases of the processing
| Purpose | Legal basis |
|---|---|
| Responding to table booking requests and to itinerary information requests | Performance of pre-contractual measures taken at the data subject’s request (Art. 6.1.b GDPR) |
| Management of accommodation bookings and related obligations (guest registration, tax and accounting obligations) | Contract (Art. 6.1.b) and legal obligation (Art. 6.1.c GDPR) |
| Communication of guest data to the Questura (police headquarters) pursuant to Art. 109 TULPS (Italian Consolidated Law on Public Security) | Legal obligation (Art. 6.1.c GDPR) |
| Responding to generic contact requests | Legitimate interest in responding to requests (Art. 6.1.f GDPR) |
| Defence of rights in court and prevention of abuse | Legitimate interest (Art. 6.1.f GDPR) |
| [IF ACTIVE: Sending promotional communications/newsletter] | [Consent (Art. 6.1.a GDPR)] |
Providing the data marked as mandatory in the forms is necessary in order to act on the request; failure to provide it makes it impossible to deliver the requested service.
4. Processing methods and retention
The processing is carried out using IT and electronic tools, with security measures adequate to prevent data loss, unlawful or incorrect use and unauthorised access. There is no automated decision-making or profiling.
The data is retained for the time strictly necessary for the purposes for which it was collected:
- information requests and table bookings: up to 12 months from the last contact;
- data relating to stays: for the period required by civil-law and tax obligations (up to 10 years);
- data transmitted to the Questura: in accordance with the terms of the law.
5. Recipients of the data
The data may be processed by authorised personnel of the Controller and communicated to: technical service and website hosting providers; the booking engine provider (Beddy); administrative, tax and legal consultants; public security authorities in the cases provided for by law. External parties act as independent controllers or as processors pursuant to Art. 28 GDPR. The data is not subject to dissemination.
6. Transfers outside the EU
The data is processed within the European Union. Where some service providers entail transfers to third countries, these take place in compliance with Chapter V of the GDPR (adequacy decisions or standard contractual clauses).
7. Rights of the data subject
Pursuant to Articles 15–22 GDPR, the data subject has the right to obtain access to their data, rectification, erasure, restriction of processing and portability, as well as to object to the processing and to withdraw any consent given at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
Requests may be sent to the Controller by writing to info@martalake.it or to the postal address indicated above.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if they believe that the processing infringes the applicable legislation.
8. Minors
The services of the site are intended for adults. Bookings for family groups that include minors are made by parents or by those exercising parental responsibility.
9. Cookies
For information on the use of cookies and similar technologies, please refer to the Cookie Policy.
10. Changes to this notice
The Controller reserves the right to amend or update this notice. Updated versions will be published on this page with an indication of the date of the last update.
