1. Data Controller
The Data Controller for the data collected through the mamacostays.com website and the hospitality services offered by Mamaco is:
- Company Name: Turist s.r.l.
- Registered Office: Via Francesco Crispi 65, Foggia (FG)
- Tax Code/VAT No.: 04161600723
- Contact: e-mail: info@turistsrl.com
2. Personal Data Collected
The Controller collects the following categories of data:
- Identification and Contact Data: Name, Surname, Residence Address, Email Address, Phone Number.
- Data Required by Law: Details of an Identity Document (type, number, issue and expiry date) necessary for the **Communication to Public Security (Questura)** as required by Italian hospitality regulations.
- Booking and Payment Data: Dates of stay, number of guests, tax data (Tax Code/VAT No.) and information related to the payment method. Payment data is managed by certified external intermediaries and is not stored entirely by Turist s.r.l.
- Data Collected via Forms (e.g., Contact Form 7): Data voluntarily provided by the user through the contact forms on the site (name, email, message) for managing requests.
- Digital Service Usage Data: Guest Portal access logs, data on virtual key usage, and interactions with support services, including conversations with automated systems (AI/Chatbot).
- Security Data: Images recorded via video surveillance systems installed in external and/or access common areas (where present, with appropriate signage).
- Navigation Data (Cookies): IP address, data on visited pages, and language preferences.
3. Purposes of Processing and Legal Basis (GDPR)
The processing of your data is necessary and carried out for the following purposes:
- Execution of the Stay Contract: Management of the booking and provision of requested services (Legal Basis: Art. 6.1, letter b – Contractual necessity).
- Fulfillment of Legal Obligations: Compliance with legal rules, particularly the obligation to communicate guest data to Public Security (Questura) and tax obligations (Legal Basis: Art. 6.1, letter c – Legal obligation).
- Response to Requests: Management of communications and requests sent via the site or customer support (Legal Basis: Art. 6.1, letter b for pre-contractual requests or letter f – Legitimate interest).
- Security and Protection: Protection of company assets and the security of guests and property through video surveillance in common areas (Legal Basis: Art. 6.1, letter f – Legitimate interest).
- Marketing: Sending newsletters or commercial communications, only with your explicit consent (Legal Basis: Art. 6.1, letter a – Consent).
4. Information on the Use of Cookies
The mamacostays.com website uses cookies to ensure correct functioning, traffic analysis, and to store preferences.
Types of Cookies Used:
- Technical Cookies (Necessary): Essential for the website’s operation. These include cookies for managing the booking session and language cookies (e.g., WPML) to store your language preference. Your consent is not required for these.
- Analytical Cookies: Used to collect aggregated and anonymous statistical data on site usage (e.g., Google Analytics). If anonymized (e.g., masked IP), they may not require consent.
- Profiling and Third-Party Cookies (Optional): Used to create user profiles and display personalized advertising (e.g., marketing, social networks, embedded third-party services). **The use of these cookies requires your prior consent** managed via the banner.
Consent Management: You can revoke or modify your cookie preferences at any time through the specific consent management tool or your browser settings.
5. Transparency on the Use of Artificial Intelligence (AI)
Turist s.r.l. utilizes Artificial Intelligence-based systems to optimize communication and support for guests (e.g., chatbot assistance or automated responses).
- Purpose: AI is employed for first-level support, providing immediate and automated responses.
- Guarantee: AI systems process the text of your conversations, but **are not used to make legal decisions or decisions that significantly affect the user without human intervention** (no automated profiling that produces binding effects).
6. Data Recipients and Retention
Recipients
Your data may be communicated to:
- Law Authorities: For the fulfillment of obligations (Questura, Tax Authorities).
- Data Processors: External providers who perform processing on behalf of the Controller (e.g., booking platforms, payment service providers, AI/chatbot technology providers).
Retention
- Tax Data: Retained for 10 years.
- Public Security Data: Retained for the time necessary to send to the authorities.
- Video Surveillance Images: Retained for a maximum of 24-48 hours, except for investigative needs.
- Contact Form Data: Retained for the time strictly necessary to process the request, unless you explicitly request deletion.
7. Rights of the Data Subject
Based on the GDPR, you have the right to: access, rectify, erase (right to be forgotten), restrict processing, obtain data portability, and object to processing (e.g., for direct marketing).
These rights can be exercised by sending a request to the email address: **info@turistsrl.com**. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).