Privacy Policy

Last updated: 9 marzo 2026

1. Introduction

This privacy notice describes how Altèsia Suites (hereinafter "we", "our" or "the Site") collects, uses, stores and protects your personal data when you use our website (altesiasuite.com).

Your personal data is processed in compliance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.

2. Data Controller

The controller of your personal data is:

Altèsia Suites

Strada di Civitella Benazzone 20 06134 Perugia (PG) Umbria, Italia

Email: info@altesiasuite.com

Phone: +39 347 6532405

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Data you provide voluntarily

  • Account registration: first name, last name, email address, phone number, password (encrypted)
  • Booking: first name, last name, email, phone, country, stay dates, number of guests, notes and special requests
  • Contact form: name, email, message
  • Social login (Google): first name, last name, email, profile picture (data shared by Google with your consent)

3.2 Data collected automatically

  • Browsing data: IP address (anonymised), browser type, operating system, pages visited, date and time of access
  • Cookies: information described in our Cookie Policy

3.3 Payment data

Payments are handled by Stripe. Credit/debit card details are never stored on nor pass through our servers. We only keep the transaction amount, the payment status and the Stripe transaction ID.

4. Purposes of Processing

Your personal data is processed for the following purposes:

Purpose Legal basis Data processed
Managing bookings Performance of a contract Name, email, phone, stay dates
Creating and managing accounts Performance of a contract Name, email, phone, password
Processing payments Performance of a contract Transaction data (via Stripe)
Booking-related communications Performance of a contract Name, email
Replying to contact requests Legitimate interest Name, email, message
Statistical analysis (Google Analytics) Consent Anonymised browsing data
Site security Legitimate interest IP, access logs

5. Data Retention

Your personal data is kept only for as long as strictly necessary:

  • Account data: until the user deletes the account
  • Booking data: 5 years from the check-out date (tax obligations)
  • Contact data: 12 months from the request
  • Browsing data: 26 months (Google Analytics)
  • Security logs: 12 months

6. Data Sharing

Your personal data may be shared with:

  • Stripe: to process payments (transaction data)
  • Google: for analytics (anonymised data, with your consent) and OAuth authentication
  • Aruba S.p.A.: site hosting and email service
  • Competent authorities: where required by law

We do not sell your personal data to third parties and we do not use it for commercial profiling.

7. Data Transfers

Some third-party services (Google, Stripe) may transfer data to countries outside the EU (the United States). Such transfers take place in compliance with the GDPR, on the basis of the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under the GDPR, you have the right to:

  • Access: obtain confirmation that data concerning you exists and a copy of it
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request the deletion of your data (the "right to be forgotten")
  • Restriction: restrict the processing of your data
  • Portability: receive your data in a structured format
  • Objection: object to processing based on legitimate interest
  • Withdrawal of consent: withdraw your consent at any time

To exercise your rights, contact us at info@altesiasuite.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Security

We take appropriate technical and organisational measures to protect your personal data:

  • Encrypted connection (HTTPS/SSL)
  • Passwords stored with secure hashing
  • CSRF protection on all forms
  • Payments handled by Stripe (PCI DSS Level 1)
  • Data access limited to authorised staff

10. Cookies

For detailed information about the cookies used by our site, see our Cookie Policy.

11. Changes to this Privacy Policy

We reserve the right to update this notice at any time. Changes will be published on this page together with the date of the last update. We invite you to check this page from time to time.

12. Contact

For any question about our Privacy Policy, you can contact us: