Last updated: September 2026
1. Data Controller
The Data Controller is Hotel Nazionale, with registered and operational headquarters at Via Gramsci 50, 01023 Bolsena (VT), Italy.
VAT ID: 01429460569 • CIN: IT056008A1M6UJ5HPQ
Privacy Email: info@hotelnazionale.net
Telephone: +39 339 5805043
2. Types of Data Collected
Among the personal data collected by this website, independently or through third parties, are:
- Contact and identification details: first name, last name, email address, telephone number, provided voluntarily via the request form or quote inquiry.
- Browsing and technical data: IP addresses, browser type, operating system parameters, and system logs required to maintain site security.
- Cookies and online identifiers: please refer to our dedicated Cookie Policy.
3. Purposes and Legal Basis of Processing
User data is collected to allow the Controller to deliver services, specifically:
- Responding to inquiries and quote requests: (Legal basis: performance of pre-contractual or contractual measures – Art. 6(1)(b) GDPR).
- Managing room bookings: online bookings are securely handled via the certified external platform booking-directly.com in compliance with PCI-DSS standards.
- Legal obligations: tax, accounting, and public security obligations (police guest registration).
- Security and fraud prevention: technical monitoring to preserve web infrastructure integrity (Legal basis: legitimate interest of the Controller).
4. Processing Methods and Location
The Controller implements appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of Personal Data. Data processing is carried out using computers and telecommunications tools strictly aligned with the specified purposes. Data is processed at the Controller’s premises and in certified European Economic Area (EEA) hosting data centers.
5. Data Retention Period
Personal data collected through the contact form is retained for the time strictly necessary to fulfill the request, up to a maximum of 12 months, unless a hospitality contract is concluded, in which case statutory civil and fiscal retention periods of 10 years apply.
6. Rights of the Data Subject (Arts. 15-22 GDPR)
Under the GDPR, you have the right at any time to:
- Obtain confirmation as to whether personal data concerning you exists and receive a copy (right of access).
- Obtain updating, rectification, or erasure of your personal data (right to be forgotten).
- Object to processing or request restriction of processing.
- Request data portability in a commonly used structured format.
- Lodge a complaint with the competent Data Protection Supervisory Authority (www.garanteprivacy.it).
To exercise your privacy rights, contact us at: info@hotelnazionale.net.
7. Mailing list
With the explicit consent given in the form, we record your email address and consent date in the website’s private WordPress database for communications about offers and news. Data is retained until consent is withdrawn and for no longer than 24 months after subscription. To unsubscribe or exercise your rights, write to info@hotelnazionale.net. Registration does not automatically send a guide or an email campaign.