Privacy Policy

The Data Controller is:

Emilia Strano
Monza Missori House
Private non-business tourist rental
Via Giuseppe Missori, Monza (MB), Italy
Email: info@monzamissorihouse.com
CIN: IT108033C2N8MDQCLX

Users may contact the Data Controller at the email address above regarding personal-data processing or the exercise of their rights.

Depending on use of the website and services, the following data may be processed:

• full name;
• email address;
• telephone number, where provided;
• number of guests;
• check-in and check-out dates;
• guest requests and messages;
• data necessary to manage the booking and stay;
• identification and document details required by applicable law;
• information necessary for tourist-tax obligations;
• booking information, payment amount and payment status;
• information contained in email communications;
• technical data such as IP address, browser, device, operating system and logs required for operation and security.

RentalCal states that its booking widget may collect guest name, email address, optional telephone number, guest count, requested dates, special requests/messages and other booking-related information.

Monza Missori House does not use guest data for newsletters, promotional communications or direct marketing.

Data may be collected:

• directly during the booking process;
• through the embedded RentalCal widget;
• through email;
• during check-in and the stay;
• automatically where technical data is required for operation and security;
• through booking and payment providers.

The ten-year period does not apply indiscriminately to all guest information; it is limited to essential contractual data where longer retention is necessary.

Information required for a booking must be provided in order to enter into and perform the rental agreement.

Failure to provide essential data may make it impossible to complete the booking, carry out check-in, comply with statutory requirements or provide the accommodation service.

Italian law may require the collection of guest identification and identity-document details.

Where images or copies of identity documents are temporarily obtained solely to facilitate identification and entry of the required information into AlloggiatiWeb, such copies:

• are used only for those purposes;
• are not used for unrelated purposes;
• are digitally deleted or physically destroyed as soon as the system generates confirmation that the communication has been successfully submitted, unless a specific legal obligation requires further retention.

Digital receipts confirming submissions through AlloggiatiWeb are retained for five years.

The website uses RentalCal, operated by Cole WebCraft Services Inc., British Columbia, Canada, to display availability and rates, manage reservations, collect booking data, provide transactional communications and integrate payment processing.

For guest information processed through the booking widget, RentalCal processes data on behalf of the Data Controller under its data-processing terms. For processing carried out by RentalCal for its own purposes, Cole WebCraft Services Inc. operates independently as described in its own Privacy Policy.

RentalCal uses technical providers including Convex, Vercel, Resend and Stripe.

RentalCal states that booking requests and guest conversations may remain associated with the property owner’s account while the account remains active unless deleted sooner.

Monza Missori House applies the retention criteria set out in this Privacy Policy and, where personal data is no longer necessary, arranges for its deletion directly or, where deletion depends on the provider’s functionality, requests deletion from RentalCal.

Direct booking payments are processed through Stripe and the relevant Stripe entities applicable to the payment services being used.

Payment data required to complete a transaction is collected and processed by Stripe as part of its payment services.

RentalCal states that payment is made to the property owner’s connected Stripe account, while RentalCal receives the payment status and amount but not guest card details.

Monza Missori House does not directly collect or retain the full payment-card number, security code or other complete payment-instrument credentials.

Monza Missori House may, however, receive and retain, where necessary to manage the booking and meet contractual, administrative or accounting requirements, transaction-related information, including:

• payment amount;
• payment status;
• transaction date;
• transaction reference or identifier;
• information necessary to link the payment to the relevant booking.

Depending on the payment method and services used, Stripe may process data including:

• full name;
• email address;
• billing address where applicable;
• IP address;
• device information;
• booking and transaction data;
• payment-method information.

Depending on the specific service and processing activity, Stripe may process personal data as a data processor on behalf of the business user or as a data controller for its own purposes, including:

• fraud prevention and detection;
• security;
• regulatory compliance;
• management of financial and payment providers;
• operation and improvement of its services.

Stripe processes personal data under its applicable Privacy Policy and agreements.

Where applicable, the tourist tax imposed by the Municipality of Monza is managed separately from the booking price.

Necessary personal data may be processed to determine applicability, verify exemptions, collect the tax and comply with reporting, accounting or administrative obligations.

Information sent to info@monzamissorihouse.com is used only to respond to enquiries, manage bookings and stays, provide assistance and fulfil contractual or legal obligations.

It is not used for newsletters or marketing.

Personal data may be disclosed where necessary to:

• RentalCal;
• Stripe and the relevant Stripe entities;
• hosting, infrastructure, email and security providers;
• professional advisers where required;
• public-security authorities;
• the Municipality of Monza and other public bodies where required by law;
• competent judicial, administrative or tax authorities.

Personal data is not sold to third parties.

RentalCal states that data may be processed in Canada, the United States and other countries and relies, where applicable, on adequacy decisions, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Stripe operates through a global infrastructure and may transfer personal data outside the European Economic Area.

Such transfers are made using the mechanisms provided by applicable law and Stripe’s contractual documentation, including, where applicable, the Data Privacy Framework and European Commission Standard Contractual Clauses.

Further information is available in Stripe’s Privacy documentation, Data Processing Agreement and Data Transfers Addendum.

The website may use technical cookies, local storage or similar technologies required for operation and integrated services.

Non-essential technologies will only be used in accordance with applicable law and, where required, after consent.

Monza Missori House does not use RentalCal newsletter or marketing functionality.

Further information is provided in the dedicated Cookie Policy.

Monza Missori House does not use solely automated decision-making, including profiling, producing legal or similarly significant effects.

RentalCal states the same for its service.

Bookings must be made by adults.

Data concerning minor guests is processed only:

• as part of a booking made by a responsible adult;
• where necessary to manage the stay;
• where required by applicable law.

Appropriate and proportionate technical and organisational safeguards are used to protect personal data against loss, destruction, alteration, unauthorised disclosure or access.

RentalCal states that its measures include TLS/HTTPS encryption, password hashing, access controls and secure infrastructure.

Where applicable under the GDPR, users may:

• access their personal data;
• request rectification;
• request erasure;
• request restriction of processing;
• object to processing;
• request data portability where applicable;
• withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to:

info@monzamissorihouse.com

Users may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

The website may contain links to external services such as Airbnb, Booking.com, RentalCal and Stripe.

Processing carried out independently by those services is governed by their respective privacy policies.

This Privacy Policy may be updated to reflect legal, technical, organisational or service changes.

The updated version will be published on this page together with its revision date.