Privacy Policy of Prisma Rooms

1. Data Controller

The Data Controller is Turbahmento srls, with registered office at via di Monte Fiore 34, Roma, Italia, VAT No. 17348261003, e-mail: info@prismarooms.com, PEC: turbahmento.srls@pec.it.

2. Types of Data Processed

• Browsing data (e.g. IP address, browser type, pages visited);
• Data provided voluntarily via booking or contact forms (e.g. first name, last name, e-mail, phone number, payment details, preferences, and requests);
• Data shared via WhatsApp if the user contacts the property through this channel (in accordance with WhatsApp’s service terms);
• Cookies and tracking tools, as described in the Cookie Policy located in the footer of this site.

3. Purposes and Legal Bases of Processing

Personal data are processed for the following purposes:

• Management of bookings and provision of the requested service (legal basis: performance of a contract or pre-contractual measures, Art. 6.1.b GDPR);
• Communications related to the stay (e.g. confirmations, operational information) (Art. 6.1.b GDPR);
• Responding to information requests via e-mail, form, or WhatsApp (Art. 6.1.b GDPR);
• Legal and tax obligations (Art. 6.1.c GDPR);
• Protection of the Data Controller’s rights (e.g. in case of disputes) (Art. 6.1.f GDPR);
• Marketing and newsletters only with the user’s explicit consent (Art. 6.1.a GDPR).

4. Methods of Processing

Data processing is carried out using electronic and/or paper tools, with technical and organisational measures suitable to ensure confidentiality, integrity, and availability. Access to data is limited to authorised personnel and external parties appointed as data processors.

5. Data Retention Period

• Booking data: retained for the time necessary to manage the stay and to meet legal obligations (e.g. tax, public security);
• Contact and correspondence data: generally retained for 12 months from the last communication, unless needed for legal defence or due to legal obligations;
• Marketing data: retained until consent is withdrawn;
• Cookies and similar technologies: as indicated in the Cookie Policy located in the footer of this site.

6. Data Disclosure and Transfer

Data may be disclosed to:

• technical and management service providers of the Website (e.g. hosting, booking software);
• payment service providers and payment gateways;
• consultants and professionals (e.g. accountants, lawyers);
• public authorities, where required by law.

Data are not transferred outside the European Economic Area unless to entities that ensure adequate protection measures (e.g. standard contractual clauses).

7. Data Subject Rights

Under Articles 15–22 of the GDPR, the data subject may exercise the right to:

• access their data;
• rectification;
• erasure (right to be forgotten), where applicable;
• restriction of processing;
• data portability;
• object to processing (particularly for processing based on legitimate interest or for marketing purposes);
• withdraw consent without affecting the lawfulness of processing based on consent before withdrawal.

Requests may be sent to: turbahmento.srls@pec.it. It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. WhatsApp Contacts

If the user contacts Prisma Rooms via WhatsApp, the messages will be processed by Turbahmento srls in order to respond to the request. Please note that WhatsApp is a third-party service subject to its own terms and policies; users can refer to WhatsApp’s privacy notice for details on processing carried out by the service provider.

To contact the property via WhatsApp, please use the contact link available in the website header.

9. Security Measures

The Data Controller adopts appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

10. Changes to this Notice

This notice may be subject to updates. Any changes will be published on this Website with an indication of the date of the last update.