Data Processing Notice

Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR), BEATRICE SCAURI srls, registered at Largo S.M.S. dell'Evangelizzazione 6, 00144 Roma (RM), Italy, informs you that the personal data collected through the contact and subscription forms will be processed for the following purposes:

• A — to respond to your enquiries. Legal basis: pre-contractual measures taken at the data subject's request, Art. 6(1)(b) of Regulation (EU) 2016/679 (GDPR).
• B — to send informational and/or promotional communications. Legal basis: freely given consent, Art. 6(1)(a) GDPR, which may be withdrawn at any time.
• C — Handling of complaints, disputes and litigation relating to the contractual relationship, and the exercise and protection of the Controller's rights out of court and before the courts. Legal basis: legitimate interest of the Controller under Art. 6(1)(f) of Regulation (EU) 2016/679 (GDPR), consisting in legal defence and in the protection of its contractual, financial and reputational position.

Providing data for purpose A is required; without it we cannot send you the requested information. Providing data for purpose B is optional. Purpose C uses the data already collected for the previous purposes and for the performance of the contract: no further provision of data is required.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. For processing based on the Controller's legitimate interest (purpose C) you have the right to object under Art. 21 GDPR.

Data retention

Your data will be retained for as long as needed to respond to your requests (purpose A). For purpose B, data will be retained for 24 months from the last contact, or until consent is withdrawn. For purpose C, data is retained until the right becomes time-barred, normally ten years. The full set of retention periods is set out in the Privacy Policy.

Disclosure and dissemination

Data will not be disclosed or disseminated to third parties, except as required to comply with legal obligations or to perform the service; providers processing data on behalf of the Controller act as data processors.

Data subject rights (Arts. 15-22 GDPR)

You may exercise the rights granted by Arts. 15-22 of Regulation (EU) 2016/679 by writing to ilmareingiardino@gmail.com:

• right of access to your personal data and to information about the processing (Art. 15);
• right to rectification of inaccurate data and completion of incomplete data (Art. 16);
• right to erasure of your data (Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object to processing, including processing based on the Controller's legitimate interest (Art. 21);
• right not to be subject to a decision based solely on automated processing, including profiling (Art. 22).

You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal, and to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

For the general framework of the processing — categories of data collected, guests' identity documents, detailed retention periods and legal references — please refer to the Privacy Policy.

Last updated: 28 August 2026