This policy explains how TM Property Management Srl – Hotel Leone uses personal data when you visit our website, contact us, book or attend a retreat. It is provided under the EU General Data Protection Regulation (GDPR) and Italian data protection law.
Last updated: 31ST October 2026
Who we are
The data controller is TM Property Management Srl – Hotel Leone, Via Vittorio Emanuele II, 60, 63853 Montelparo (FM), Italy (VAT IT01960440442). Contact details are at the end of this policy.
What we collect and why
Purpose | Data | Legal basis |
Running and securing our website | Technical data such as IP address and browser type | Our legitimate interest |
Answering enquiries | Contact details and your message | Steps taken at your request before a booking |
Managing bookings, check-in and payment | Contact and booking details | Performance of our contract with you |
Guest registration, tax and accounting | Identity and invoicing details | Legal obligation |
Catering for dietary or health needs | Information you choose to share | Your explicit consent |
Retreat photos on our website and social media | Images of you | Your consent |
Sending news and offers | Name and email address | Your consent, or for past guests our legitimate interest in offering similar retreats |
Data needed for a booking or required by law must be provided; everything else is optional. You can withdraw consent or unsubscribe at any time.
Cookies
We use technical cookies needed for the site to work. Analytics cookies and content from other services, such as maps and videos, are only used if you accept them. You can change your choice at any time through the cookie settings on our website or in your browser.
CCTV
For security, we use CCTV at building entrances and exits and in some common areas, based on our legitimate interest. Recordings are deleted automatically within 24 hours, unless the authorities request them following an incident.
Who we share data with
We share data only where needed with:
- service providers acting on our behalf under a data processing agreement, such as website, email, payment and IT providers, and our accountant
- the visiting tutor running your retreat
- public authorities, where the law requires it
Some providers may process data outside the European Economic Area. Where they do, we rely on safeguards recognised under the GDPR, such as adequacy decisions or the EU Standard Contractual Clauses.
How long we keep data
We keep data only as long as needed for the purposes above. Booking, accounting and correspondence records are kept for 10 years, as Italian law requires. Check-in information, including identity details, is deleted monthly, and CCTV recordings as described above. Data used on the basis of consent is kept until you withdraw it.
Your rights
You can ask to access, correct or delete your data, restrict or object to its use, or receive a copy in a portable format. You can also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Contact us
Email info@hotelleone.it, telephone +39 340 416 6054, or write to us at the address above.
We may update this policy; the date at the top shows the latest version.
