Last updated: 25/07/2025
This policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes the methods for processing the personal data of users who visit the website www.arilastays.com, an unregistered brand of Soggiorni Brevi Srl.

1. Data Controller

Soggiorni Brevi Srl
Via per Cuasso al Piano, 9 – 21050 Cuasso al Monte (VA)
VAT / Tax Code: 03940130127
Email: info@soggiornibrevi.com
Certified Email (PEC): soggiornibrevisrl@pec.it

2. Types of Data Processed

• Browsing data: IP addresses, domain names, technical and timestamp data.

• Voluntarily provided data: first name, last name, email, phone number, stay preferences.

• Cookies: technical and profiling, first-party or third-party (see Cookie Policy).

3. Purpose of Data Processing

• Managing requests and stays

• Operational and informational communications

• Fiscal and legal obligations

• Promotional activities upon explicit consent

4. Legal Basis

The processing is lawful based on:

• performance of a contract (Art. 6.1.b GDPR)

• legal obligations (Art. 6.1.c GDPR)

• legitimate interest (Art. 6.1.f GDPR)

• express consent (Art. 6.1.a GDPR)

5. Processing Methods

Processing is lawful, secure, transparent, and limited to what is necessary, including through digital tools.

6. Recipients

• Technical and platform service providers

• Authorized collaborators

• Tax/legal consultants

• Public authorities for legal obligations

7. Data Retention

Data will be retained for the necessary duration and in accordance with legal timeframes (e.g., 10 years for fiscal purposes).

8. Data Subject Rights

Users may request at any time: access, rectification, deletion, restriction, objection, and data portability. Write to info@soggiornibrevi.com

9. Nature of Data Provision

Optional but necessary: failure to provide data may prevent the provision of the service.

10. Brand

Arila Stays is an unregistered brand used by Soggiorni Brevi Srl to promote its stays in Italy.