pursuant to Article 13 of EU Regulation 2016/679

1. Data Controller

The Data Controller for personal data is Ava Home di Daniel Gaioni, based in Darfo Boario Terme (Bs), reachable at the email address: info@avahome.it.

The Controller undertakes to process the personal data of guests in compliance with EU Regulation 2016/679 (“GDPR”) and applicable Italian legislation regarding the protection of personal data.

2. Personal data collected

During the booking and stay procedure, Ava Home may collect and process personal data provided directly by the guest, including personal details, contact details, data relating to the stay, copies of identity documents, information necessary for the preparation of the short-term lease agreement, and any further data required by current legislation.

3. Data collection methods

Data is collected primarily through the completion of the form available at the following link: https://avahome.it/prenotazioni.

Through this form, the guest enters their personal data, stay-related details, and transmits the required documentation, including the identity documents necessary for legal compliance.

4. Creation of the short-term lease agreement

Completing and submitting the form available at the link https://avahome.it/prenotazioni involves the collection of data necessary for the preparation of the short-term lease agreement for the requested stay period.

The guest acknowledges that the data entered in the form may be used by Ava Home to draft, prepare, and manage the short-term lease agreement, as well as to carry out all administrative, fiscal, and legal activities related to the stay.

5. Purposes of processing

The guest’s personal data is processed to manage the booking, verify the identity of guests, prepare the short-term lease agreement, fulfill obligations under current legislation, communicate data to the competent authorities, manage fiscal and administrative requirements, and protect the rights of the Controller if necessary.

6. Communication to competent authorities

Guest data, including that shown in identity documents, may be communicated to the competent authorities, including the Police Headquarters (Questura), the Alloggiati Web portal, the Revenue Agency (Agenzia delle Entrate), public bodies, or other institutional entities, in the cases and according to the methods provided by law.

Such processing is necessary to allow Ava Home to correctly fulfill the regulatory obligations connected to short-term rental and hospitality activities.

7. Legal basis for processing

The processing of personal data is based on the execution of pre-contractual and contractual measures, on the fulfillment of legal obligations, on the legitimate interest of the Controller in protecting their rights and, where necessary, on the express consent of the data subject.

8. Mandatory nature of data provision

The provision of the requested data is necessary to proceed with the booking, the preparation of the short-term lease agreement, the registration of guests, and the execution of legal obligations.

Failure to provide the requested data or documentation may result in the impossibility of completing the booking and allowing the stay at the property.

9. Storage of data and documents

Personal data will be stored for the time strictly necessary to achieve the purposes for which it was collected and, subsequently, for the period provided for by applicable legislation.

Identity documents may be stored for a maximum period of [insert period], unless there are different legal obligations or a need to protect the rights of the Controller. Fiscal, administrative, and contractual data may be stored for the period provided for by civil and fiscal regulations, generally equal to 10 years.

10. Processing methods and security

Data processing is carried out using IT, digital and, if necessary, paper tools, with methods suitable for guaranteeing the security, confidentiality, and protection of personal data.

Ava Home adopts appropriate technical and organizational measures to reduce the risk of unauthorized access, loss, disclosure, modification, or improper use of personal data and documents transmitted by guests.

11. Communication of data to third parties

Personal data may be communicated, within the necessary limits, to tax consultants, legal consultants, IT service providers, hosting providers, management software, payment platforms, authorized collaborators, and entities that support Ava Home in managing bookings, stays, and administrative requirements.

These entities will process the data according to their respective privacy qualifications, as data processors or independent controllers, in compliance with current legislation.

12. Responsibility of the guest

The guest declares that the data provided through the form is correct, truthful, up-to-date, and complete. The guest assumes responsibility in the event of sending inaccurate, incomplete, or outdated data, or documents that are invalid, false, or do not correspond to their identity.

Ava Home cannot be held responsible for any consequences deriving from incorrect, incomplete, or untruthful information provided by the guest.

13. Rights of the data subject and acceptance of the policy

The guest may exercise, within the limits provided by current legislation, the rights of access, rectification, erasure, restriction of processing, objection, and data portability, by sending a request to the Controller via the contact details indicated in this policy.

By selecting the appropriate box within the form, the guest declares that they have read and understood this privacy policy and authorizes the processing of their personal data and transmitted documents for the purposes indicated, including the preparation of the short-term lease agreement, the management of the stay, and communication to the competent authorities.