Privacy
Policy.

The data controller is Il Fortino S.r.l., with registered office at Via Giuseppe Verdi 24, 54100 Marina di Massa (MS), Italy.

For information or to exercise your rights: info@residencefortino.it · +39 0585 240397.

We may process identification and contact details, booking and stay information, payment and invoicing data, information required for public-security obligations and, when essential to provide a requested service, data concerning a guest’s particular needs.

When you browse the website, technical systems may also collect your IP address, device and browser type, date and time of the request, pages visited, and security or diagnostic data.

• Enquiries and bookings: responding to contacts, preparing quotations, confirming and managing stays. Legal basis: pre-contractual steps and performance of a contract.
• Legal obligations: public-security, administrative, accounting and tax requirements. Legal basis: compliance with a legal obligation.
• Guest assistance: managing requests and services during a stay. Legal basis: performance of a contract or, where necessary, consent.
• Marketing communications: sending offers and updates only to people who have given specific consent, which may be withdrawn at any time.
• Security: protecting people and property, preventing misuse and ensuring IT security. Legal basis: the controller’s legitimate interests.

Providing data required for a booking and by law is mandatory. Without it, we cannot confirm or provide a stay. Providing other data is optional.

Data is processed using paper and electronic systems with appropriate measures to protect it against unauthorised access, loss or unlawful use.

It may be accessed by authorised staff and suppliers acting on our behalf, including administrative and tax advisers and providers of IT, booking and hosting services. Data may also be disclosed to the police headquarters, tax authorities or other public authorities when required by law. We do not sell or publicly disclose personal data.

If a supplier entails a transfer outside the European Economic Area, the transfer is carried out in compliance with the GDPR, based on an adequacy decision or appropriate safeguards.

• enquiries not followed by a booking: for as long as needed to respond and normally no longer than 12 months;
• contractual, administrative and tax data: for 10 years, or longer where required by audits or applicable law;
• data retained to speed up future stays: with consent, for up to 5 years;
• marketing communications: until consent is withdrawn and, in any event, no longer than 5 years after the last interaction;
• technical and security data: for the time strictly necessary to operate and protect the website.

Some areas of the property, identified by signs displayed before entry, are monitored by CCTV to protect people and property. Footage is not used for marketing purposes and may only be viewed by authorised persons or by public authorities upon request.

Recordings are normally deleted after 24 hours. This period may be extended for public holidays, property closures, specific security needs or requests from an authority, but only for as long as necessary and in accordance with applicable law.

This website does not directly use profiling or marketing cookies and does not carry out behavioural advertising. Technical tools that are strictly necessary for the website’s operation, security and delivery may be used and do not require prior consent.

The Location section uses satellite imagery supplied by Esri and its partners. Loading these images may involve transmitting technical data, such as your IP address and browser information, to those providers. Links to Google Maps, email and telephone services are activated only when selected by the user.

Where provided for by the GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

Requests may be sent to info@residencefortino.it. You may also lodge a complaint with the Italian Data Protection Authority or seek a judicial remedy.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.