Privacy policy
In short
- We only process the data you send us through the contact and availability request forms, in order to reply to you and manage any booking.
- We do not use your data for advertising and we never sell it to anyone.
- The website only uses technical cookies that are necessary for it to work: no profiling cookies.
- You can ask us at any time to see, correct or delete your data by writing to info@lidorosa.it.
This policy explains how the personal data of users who visit the website www.lidorosa.it (the “Website”) and use its services is processed. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree 196/2003 (“Privacy Code”) as amended by Legislative Decree 101/2018, and the Guidelines on cookies issued by the Italian Data Protection Authority on 10 June 2021.
This policy applies only to this Website and not to other websites that may be reached through links.
1. Data controller
The data controller is New Age di Leonardo e Nazario Biscotti s.n.c., with registered office at Via Cesare Battisti, 94 – 71010 Lesina (FG), Italy, registered with the Foggia Companies Register (REA FG-176472), VAT number IT02292870710.
- E-mail: info@lidorosa.it
- Phone and fax: +39 0882 995047
The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so. For any question about the processing of your data you can write to the e-mail address above.
2. What data we collect
Data you provide
When you fill in the contact form or the availability and booking request form, we collect the data you enter:
| Form | Data |
|---|---|
| Contact | name, e-mail, phone (optional), period of interest (optional), message |
| Availability and booking request | name, e-mail, phone, chosen room or apartment, arrival and departure dates, number of adults and children, children’s ages, requested board, any notes |
We also process the data you give us when you write to us by e-mail or call us using the contact details on the Website. Please do not include unnecessary data in your messages, in particular health data or other special categories of data (Art. 9 GDPR).
If you give us data about other people (for example your travel companions), please do so only after informing them.
Browsing data
The computer systems running the Website collect, during normal use, some data whose transmission is implicit in the use of Internet protocols: for example the IP address, browser and device type, date and time of the request, the page visited and the outcome of the request. This data is not collected to identify you and is used only to ensure that the Website works properly and securely.
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Replying to your requests for information sent through the contact form, by e-mail or by phone | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) |
| Checking availability, sending you a quote and managing the booking of rooms and apartments | Pre-contractual measures and performance of the contract (Art. 6(1)(b) GDPR) |
| Complying with legal obligations, for example tax and accounting obligations and the registration of guests with the public security authorities | Legal obligation (Art. 6(1)(c) GDPR) |
| Ensuring the security of the Website and preventing abuse and automated submissions (spam) | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Establishing, exercising or defending legal claims | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
Your data is not used for marketing, profiling or newsletters, and is not subject to decisions based solely on automated processing.
4. Providing your data
The data marked with an asterisk (*) in the forms is necessary to handle your request: without it we cannot reply. The other data is optional and leaving it out has no consequences.
5. How data is processed and protected
Data is processed electronically and, where necessary, on paper, by personnel authorised and instructed by the controller, in compliance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation.
We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction, including an encrypted connection (HTTPS), protection of the forms against automated submissions and restricted access to the Website’s management area.
6. How long we keep your data
- Requests for information and availability that do not lead to a booking: for the time needed to reply and in any case no longer than 24 months from the last contact.
- Booking data: for the duration of the relationship and afterwards for the period required by tax and civil law (usually 10 years).
- Browsing data: for the time strictly necessary to ensure the security of the Website, normally no longer than 12 months, unless needed to investigate offences.
After these periods the data is deleted or anonymised.
7. Who may receive your data
Your data is not disclosed to the public or sold. It may be accessed, only for the purposes described above, by:
- the controller’s authorised staff;
- the providers that manage the Website hosting, e-mail and technical maintenance on our behalf, appointed as data processors (Art. 28 GDPR);
- tax and accounting advisers, for legal obligations;
- public authorities, where required by law (for example the registration of guests with the police).
The up-to-date list of data processors is available on request by writing to info@lidorosa.it.
8. Transfers outside the European Union
The controller does not transfer your data outside the European Economic Area. If you choose to view the maps and virtual tour provided by Google (see section 9), Google may also process some data in the United States, on the basis of the EU-U.S. Data Privacy Framework and the standard contractual clauses approved by the European Commission.
9. Cookies and third-party services
Cookies are small text files that a website stores on your device. This Website uses only technical cookies, necessary for it to work, which do not require consent (Art. 122 of the Privacy Code):
| Cookie | Purpose | Duration |
|---|---|---|
PHPSESSID | Keeps the browsing session and protects the contact and booking forms from fraudulent submissions | Until the browser is closed |
lidorosa_admin | Only for the area reserved to the Website managers: keeps the administrator logged in | Until the browser is closed or logout |
The Website does not use profiling cookies, analytics or advertising tools. Fonts, photos and videos are hosted directly on our server.
Google maps and virtual tour
Some pages (Home, Contact and Virtual tour) show Google Maps maps and images. When you view them, Google LLC may collect data such as your IP address and set its own cookies, according to its privacy policy. The controller has no access to this data.
Links to social networks
The links to Facebook, Instagram, Tripadvisor and X on the Website are simple links: no data is sent to these services until you click them. After clicking, the privacy policies of the respective providers apply.
How to manage cookies
You can block or delete cookies in your browser settings. If you block technical cookies, some features of the Website, such as sending the forms, may not work properly.
10. Your rights
At any time you can exercise the rights provided by Articles 15–22 GDPR:
- access: find out whether we process your data and obtain a copy;
- rectification: correct or complete inaccurate data;
- erasure: have your data deleted, unless it must be kept by law;
- restriction: ask for processing to be restricted in certain cases;
- portability: receive your data in a structured, commonly used format;
- objection: object to processing based on the controller’s legitimate interest.
To exercise them, write to info@lidorosa.it. We will reply within one month of your request; we may ask you to confirm your identity.
If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome, or with the supervisory authority of your country of residence.
11. Minors
The services of the Website are intended for adults. Booking requests must be sent by an adult, even when they concern minors who will stay with them.
12. Changes to this policy
The controller may update this policy, for example following changes in the law or in the services offered by the Website. The version in force is always the one published on this page, with the date of the last update shown below. In case of discrepancies, the Italian version prevails.
Last updated: 28 October 2026
