1. Introduction
This Privacy Policy explains how Best Rent (hereinafter referred to as the “Facilitator”) collects, uses, and protects personal data provided by users (hereinafter referred to as the “Users”) of its platform.
The Facilitator is committed to safeguarding the privacy of its Users and ensuring compliance with the General Data Protection Regulation (GDPR) and applicable Italian data protection laws.
2. Data Controller
The data controller responsible for the processing of personal data is: Best Rent Address: [Insert Address] Email: [Insert Email] Phone: [Insert Phone Number]
3. Personal Data Collected
The Facilitator may collect the following categories of personal data from Users:
1. Personal identification data: Name, surname, date of birth, nationality, and identification documents.
2. Contact information: Email address, phone number, and address.
3. Booking details: Accommodation preferences, dates of stay, and payment information.
4. Payment data: Credit card information or bank details (processed securely by third-party payment processors).
5. Technical data: IP address, device information, and cookies (see Cookie Policy).
4. Purpose of Data Collection
The Facilitator collects and processes personal data for the following purposes:
1. To facilitate bookings and manage reservations.
2. To communicate with Users regarding their bookings and provide customer support.
3. To process payments securely.
4. To comply with legal obligations (e.g., local regulations requiring the registration of guests).
5. Legal Basis for Processing
The Facilitator processes personal data based on the following legal grounds:
1. Performance of a contract: To manage bookings and provide related services.
2. Legal obligations: To comply with laws and regulations, such as local tax or security reporting requirements.
3. Legitimate interest: For internal administrative purposes, fraud prevention, and improving services.
6. Data Sharing
The Facilitator may share personal data with:
1. Property Owners: To finalize bookings and fulfill accommodation services.
2. Service providers: Payment processors and IT service providers that assist in delivering services.
3. Authorities: When required by law or for public safety (e.g., police or tax authorities).
All third parties with whom data is shared are bound by confidentiality agreements and GDPR-compliant processing agreements.
7. Data Retention
Personal data will be retained only as long as necessary for the purposes outlined above, including:
· Booking-related data: Retained for up to 5 years after the completion of the booking for legal and accounting purposes.
8. User Rights
Under GDPR, Users have the following rights concerning their personal data:
1. Access: The right to access personal data held by the Facilitator.
2. Rectification: The right to correct inaccurate or incomplete data.
3. Erasure: The right to request deletion of data, subject to legal obligations.
4. Restriction: The right to restrict processing of personal data.
5. Portability: The right to receive personal data in a structured, commonly used, and machine-readable format.
6. Objection: The right to object to data processing for specific purposes, including marketing.
7. Withdraw consent: The right to withdraw consent at any time for processing based on consent.
To exercise these rights, Users can contact the Facilitator at [Insert Contact Email].
9. Data Security
The Facilitator implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
· Secure servers and encryption of sensitive data.
· Regular system audits and vulnerability assessments.
· Restricted access to personal data to authorized personnel only.
10. Data Transfers
Personal data may be transferred outside the European Economic Area (EEA) only to countries with adequate data protection laws or through appropriate safeguards, such as Standard Contractual Clauses.
11. Cookies
The Facilitator uses cookies to improve the User experience and analyze platform usage. For more information, refer to the Cookie Policy [Insert Link to Cookie Policy].
12. Updates to the Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in practices or legal requirements. Updates will be posted on the platform with a revised effective date.
13. Contact Information
For questions, concerns, or to exercise data rights, Users can contact the Facilitator at: Email: [Insert Email] Phone: [Insert Phone Number] Address: [Insert Address]
14. Complaints
If Users believe their rights under GDPR have been violated, they can file a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or the relevant supervisory authority in their jurisdiction.