Privacy Policy of accadiarelais.com

Last updated: 7 September 2025

1. Data Controller

The Data Controller is Flat4travel s.r.l., registered office at Riviera di Chiaia, 267 – 80121 Naples (Italy), VAT 07905571217.
Privacy contact e-mail: info@accadiarelais.com.

2. Scope of this notice

This notice is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data-protection laws in relation to the website accadiarelais.com (the “Website”).

3. Types of data processed

• Data provided by the user: information voluntarily sent through any forms on the Website (e.g., contact form) and/or by e-mail (info@accadiarelais.com).
  
• Browsing data: technical data automatically collected by the IT systems and software procedures used to operate the Website (e.g., IP address, date/time of the request, server response code, device parameters). Such data are used solely to ensure the proper functioning and security of the Website and for the possible ascertainment of liability in case of cyber offences.
• Cookies and similar technologies: see the “Cookies” section and the dedicated cookie policy.

4. Purposes and legal bases for processing

• • Responding to user requests (e.g., information, availability, quotations): legal basis is the performance of pre-contractual measures and/or the Controller’s legitimate interest in handling requests.
  • Website management, security and abuse prevention: legal basis is the Controller’s legitimate interest in ensuring network and system security.
  • Compliance with legal obligations (e.g., administrative, tax, accounting obligations where applicable): legal basis is legal obligation.

5. Retention periods

Data are retained for the time strictly necessary to achieve the purposes for which they were collected and, in any case, in accordance with applicable statutory time limits.

• Requests via form/e-mail: for a maximum of [insert X months] from closure of the request, unless further legal needs arise.

• Technical logs and security: for a period consistent with the Website’s security purposes and applicable law.

6. Provision of data

Providing the data marked as required in the Website’s forms (where present) is necessary to process requests; failure to provide such data may make it impossible to handle the request.

7. Recipients or categories of recipients

Data may be processed by persons authorised by the Controller and, where necessary, disclosed to suppliers providing services instrumental to the operation of the Website and/or the handling of requests (e.g., hosting provider, IT support), appointed as Processors pursuant to Article 28 GDPR.

8. Data transfers outside the EEA

Where, for technical needs or service provision, data are transferred outside the European Economic Area, the Controller will ensure that the transfer takes place in compliance with Chapter V of the GDPR (e.g., on the basis of European Commission adequacy decisions, Standard Contractual Clauses, or other appropriate safeguards).

9. Processing methods and security

Data are processed using paper, electronic and/or telematic tools, strictly related to the purposes indicated, and with appropriate technical and organisational measures to ensure data security.

10. Data subjects’ rights

Data subjects may exercise, where applicable, the rights under Articles 15–22 GDPR (access, rectification, erasure, restriction, portability, objection) and the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The right to lodge a complaint with the competent Data Protection Authority is unaffected.

11. Cookies and similar technologies

For detailed information on the use of cookies and to manage preferences, please refer to the Cookie Policy. The installation of non-technical cookies will only occur after consent via the relevant banner.

12. How to exercise your rights

To exercise rights or for any request concerning personal data protection, please write to: info@accadiarelais.com.

13. Changes to this notice

The Controller reserves the right to amend this notice at any time. Changes will be published on this page indicating the update date.

14. Specific notices

If specific services are activated (e.g., online bookings, payments, newsletters), additional notices or supplements to this policy will be provided where necessary, with specific indication of purposes, legal bases, retention periods and recipients.