{"id":3,"date":"2022-12-30T11:18:18","date_gmt":"2022-12-30T11:18:18","guid":{"rendered":"https:\/\/otiumrooftop.eu\/?page_id=3"},"modified":"2026-08-20T14:38:50","modified_gmt":"2026-08-20T13:38:50","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/otiumrooftop.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3\" class=\"elementor elementor-3\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10f4282 e-flex e-con-boxed e-con e-parent\" data-id=\"10f4282\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-35e4126 e-flex e-con-boxed e-con e-parent\" data-id=\"35e4126\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-8a31b92 e-con-full e-flex e-con e-child\" data-id=\"8a31b92\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d803b85 elementor-widget elementor-widget-heading\" data-id=\"d803b85\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">PRIVACY POLICY<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bbeb600 elementor-widget elementor-widget-text-editor\" data-id=\"bbeb600\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><i><span style=\"font-weight: 400;\">(pursuant to Articles 13 and 14 of EU Regulation 2016\/679)<\/span><\/i><\/p>\n<p><span style=\"font-weight: 400;\">This information describes the methods of processing the personal data of users who consult the website <\/span><a href=\"https:\/\/otiumrooftop.it\/en\/\"><span style=\"font-weight: 400;\">http:\/\/www.otiumrooftop.it\/<\/span><\/a><span style=\"font-weight: 400;\"> and\/or who use the services, contents and contact channels available on the site.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This information applies exclusively to this website and not to other websites that may be accessed via external links.<\/span><\/p>\n<ol>\n<li><b> Data controller<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The Data Controller is <\/span><b>OTIUM srl.<\/b> <span style=\"font-weight: 400;\">(PI 12375140014), with registered office in Turin, Corso Massimo D&#039;Azeglio n. 60, represented by its legal representative pro tempore, a company wholly owned by TO BE srl.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Contact: privacy@tobecompany.com<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The project\/site \u201c<\/span><b>Otium Rooftop<\/b><span style=\"font-weight: 400;\">\u201d identifies the venue, the catering services, lounge bar, swimming pool, events and hospitality promoted through the site.<\/span><\/p>\n<ol start=\"2\">\n<li><b> Types of personal data processed<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The following categories of personal data may be processed through the site.<\/span><\/p>\n<p><b>a) Browsing data<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The computer systems and software procedures used to operate this website may acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This category includes, for example:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IP address;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">domain names of devices used by users;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">URI\/URL addresses of the requested resources;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">date and time of the request;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">method used to submit the request to the server;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">size of the file obtained in response;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">numeric code indicating the status of the response given by the server;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">other parameters relating to the user&#039;s operating system and computing environment.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">This data is not collected to directly identify the user, but could, through processing and association with data held by third parties, allow for their identification.<\/span><\/p>\n<p><b>b)<\/b> <b>Data provided for restaurant, lounge bar, swimming pool or other service reservations<\/b><\/p>\n<p><span style=\"font-weight: 400;\">If the interested party uses the forms or contact channels available on the site to request a reservation or information relating to the services offered, data such as:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">name and surname;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">e-mail address;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">mobile number, required for the operational management of the booking and for any communications relating to confirmations, changes, cancellations, delays or other needs related to the requested service;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">type of service requested, for example restaurant, lounge bar, swimming pool, aperitif, experience or other available option;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any special notes or requests entered by the user;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any data necessary to confirm, modify or cancel the reservation.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">This data is necessary to manage the interested party&#039;s request and to allow the Data Controller to correctly organize the requested service.<\/span><\/p>\n<p><b>c) Data provided for requests relating to private or corporate events or dedicated initiatives<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For requests for information or quotes relating to private or corporate events, anniversaries, presentations, dinners, aperitifs, parties, photo shoots, promotional activities, or other initiatives to be organized at Otium Rooftop, the following may be processed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">name and surname of the contact person;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">e-mail address;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">telephone number;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any company, organization or entity represented;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">role or qualification of the contact person;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">type of event or initiative requested;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">indicative number of participants;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">organizational, logistical, set-up or food &amp; beverage needs;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any additional information included in the request.<\/span><\/li>\n<\/ul>\n<p><b>d) Data relating to allergies, intolerances or dietary needs<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For reservations, events, catering services, aperitifs, lounge bars, or food &amp; beverage experiences, interested parties may voluntarily provide information regarding allergies, food intolerances, dietary requirements, or other special needs, including through the notes or other fields available in the booking form.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This information will be processed exclusively to the extent necessary to manage the booking or provide the requested service.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Since such data may reveal information relating to the data subject&#039;s health, processing will be carried out, where necessary, based on the data subject&#039;s explicit consent or other appropriate basis set forth in Article 9 of the GDPR.<\/span><\/p>\n<p><b>e) Data relating to gift cards, vouchers, gift experiences\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In the event of the purchase or activation of gift cards, vouchers, gift experiences or similar formulas, the following may be processed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">identification and contact details of the buyer or applicant;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">identification and contact details of the potential recipient;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">type of gift, voucher, experience or membership requested;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">amount, validity and conditions of use;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any personalized message;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">payment data, where applicable.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The interested party who communicates data of third parties, such as recipients of gift cards or vouchers, declares that he or she is authorized to do so and undertakes, where necessary, to inform such parties of the processing of their data.<\/span><\/p>\n<p><b>f) Data relating to payments, deposits, penalties or administrative documentation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In the event that the booking, purchase of services, gift cards, memberships, events, or other experiences involves payments, deposits, pre-authorizations, penalties, or the issuance of tax documents, the following may be processed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">customer identification and contact details;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">tax or administrative data;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">amount, reason and date of payment;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">accounting details;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">data relating to invoices, receipts or tax documentation;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any information managed by credit institutions or payment service providers.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The Data Controller does not necessarily process the complete payment instrument data, which may be managed directly by authorized third parties, such as credit institutions or payment service providers.<\/span><\/p>\n<p><b>g) Data provided for newsletter subscription and promotional communications<\/b><\/p>\n<p><span style=\"font-weight: 400;\">If the interested party subscribes to the newsletter or consents to receive informational and promotional communications, the following may be processed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">e-mail address;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">name and surname;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">telephone number, where required;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">date and time of registration or consent collection;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IP address and technical logs relating to consent collection;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">any data relating to the opening of communications or interaction with content, where measurement tools are used.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Communications may concern updates, initiatives, offers, events, experiences, services, promotions, commercial proposals, and activities relating to Otium Rooftop and\/or other projects, services, or initiatives of the Data Controller, within the limits of the consent given.<\/span><\/p>\n<p><b>h) Images, photographs, videos and promotional content<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The site may publish images, photographs, videos or other content relating to the environments, services, events, experiences and activities carried out at Otium Rooftop.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The use of panoramic or general images, without a specific focus on an individual person, may be used for informational, documentary, and promotional purposes, in compliance with the principles of fairness, minimization, and protection of the data subjects&#039; dignity.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For images, videos, interviews, or content in which the person is clearly identifiable and constitutes the main subject of the recording, the Data Controller will, where necessary, obtain specific consent or release.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">During specific events, additional brief information or information signs may be provided at the venues where the events are held.<\/span><\/p>\n<p><b>the)<\/b> <b>Cookies and tracking tools<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The site may use technical cookies and, where applicable, analytical, functional, advertising, profiling, marketing, social plugins, or other tracking tools.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For further information, please refer to the specific Cookie Policy available on the site.<\/span><\/p>\n<ol start=\"3\">\n<li><b> Purposes and legal bases of the processing<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data will be processed for the following purposes.<\/span><\/p>\n<table>\n<thead>\n<tr>\n<th>\n<p><b>Purpose of the processing<\/b><\/p>\n<\/th>\n<th>\n<p><b>Legal basis<\/b><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Allow navigation and correct technical functioning of the site<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Legitimate interest of the Data Controller in the technical management and security of the site<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Ensure the security of the site, prevent illicit use, unauthorized access or fraudulent activity<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Legitimate interest of the Data Controller in IT security and the protection of its systems<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Respond to requests for information, reservations, availability, modification or cancellation of reservations relating to the restaurant, lounge bar, swimming pool or other services<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Execution of pre-contractual measures requested by the interested party or execution of the requested service<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Manage requests for quotes, information or organization of private, corporate events or dedicated initiatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Execution of pre-contractual measures requested by the interested party<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Organize and manage private and corporate events, anniversaries, parties, commercial initiatives, or personalized experiences<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Execution of the contract or pre-contractual measures requested by the interested party<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Process any data relating to allergies, intolerances or dietary requirements communicated by the interested party for the correct provision of the service<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Explicit consent of the interested party, where necessary; execution of the requested service within the limits permitted by applicable legislation<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Manage gift cards, vouchers, gift experiences, memberships or similar formulas, where available<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Execution of pre-contractual or contractual measures requested by the interested party<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Manage payments, deposits, pre-authorizations, penalties, receipts, invoices, and administrative documentation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Contract execution; legal obligation for tax and accounting compliance<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Respond to spontaneous communications, complaints, administrative requests or other communications sent by the user<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Execution of measures requested by the interested party or legitimate interest of the Data Controller in responding to communications received<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Send newsletters, informative, promotional and commercial communications relating to initiatives, events, services, experiences, offers and activities of the Data Controller<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Consent of the interested party<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Create and publish photographic, video, promotional or documentary content relating to the environments, services, events and activities of the Owner<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Consent, release, legitimate documentary\/promotional interest or other suitable legal basis, depending on the context<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">To ascertain, exercise or defend a right in judicial, extrajudicial or administrative proceedings<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Legitimate interest of the Data Controller in protecting its rights<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Manage cookies and technical tracking tools necessary for the functioning of the site<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Legitimate interest of the Data Controller in the correct technical functioning of the site<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Manage non-anonymized analytical cookies, advertising cookies, marketing, profiling, social plugins or other non-technical tracking tools<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Consent of the interested party, where required by applicable law<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"4\">\n<li><b> Nature of data provision<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Providing the data requested for reservations, information requests, event requests, purchases, gift cards, memberships, or similar services is necessary to allow the Data Controller to process the request and\/or provide the requested service.<\/span> <span style=\"font-weight: 400;\">Providing your telephone or mobile number in the booking form is necessary to allow the Data Controller to process your request and contact you for confirmations, changes, cancellations, delays, changes, or other communications strictly related to the requested service.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Failure to provide the data marked as mandatory may make it impossible to submit the request, confirm the booking, purchase the service, or enjoy the requested experience.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Providing data relating to allergies, intolerances, or special needs is optional, but may be necessary to allow the Data Controller to properly manage the service and protect the interested party during the experience.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Providing data for newsletter, promotional, or marketing purposes is optional. Failure to provide consent will not affect your ability to browse the site, make reservations, request information, or purchase services.<\/span><\/p>\n<ol start=\"5\">\n<li><b> Treatment methods<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data will be processed using computerized, electronic, and, where necessary, paper-based tools, using methods strictly related to the purposes indicated above.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Data Controller adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in order to prevent the loss, illicit or incorrect use of data, unauthorized access, disclosure, modification or destruction thereof.<\/span><\/p>\n<ol start=\"6\">\n<li><b> Recipients of personal data<\/b><\/li>\n<\/ol>\n<p><b>6.1. Intragroup transfers\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The data may be communicated and shared with companies belonging to the <\/span><b>TO BE Group<\/b><span style=\"font-weight: 400;\">, in compliance with the conditions of lawfulness of the processing and the rights of the interested parties for administrative, accounting, organizational and internal management purposes of the group.<\/span><\/p>\n<p><b>6.2. External transfers<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data may be processed by personnel, collaborators, and individuals authorized by the Data Controller, within the limits of their respective duties and according to specific instructions.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The data may also be communicated, where necessary, to the following categories of subjects:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IT service providers, hosting, maintenance and website management;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">providers of email services, newsletters, CRMs, booking systems or management tools;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">administrative, tax, accounting, legal or employment consultants;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">banking institutions and payment service providers;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">suppliers and parties involved in providing the requested services, managing reservations, events, catering, reception, logistics, or set-ups;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">subjects involved in the management of gift cards, vouchers, memberships or experiences, where applicable;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">photographers, video makers, communications agencies or individuals involved in the creation of promotional or documentary content;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">public authorities, bodies or subjects to whom communication is mandatory by law;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">persons in charge of debt collection or the protection of the Data Controller&#039;s rights.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">External parties processing personal data on behalf of the Data Controller will, where necessary, be appointed as data processors pursuant to Art. 28 of the GDPR.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal data will not be disclosed, except in the case of images, videos, or content published on the Data Controller&#039;s website or channels, where this occurs based on an appropriate legal basis.<\/span><\/p>\n<ol start=\"7\">\n<li><b> Transfer of data outside the European Economic Area<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data will be processed mainly within the European Economic Area.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If, for technical reasons related to the use of IT services, hosting, email, management platforms, or similar tools, it becomes necessary to transfer data to third countries, the transfer will take place in compliance with Articles 44 et seq. of the GDPR, based on an adequacy decision by the European Commission or, failing that, through adequate safeguards, such as the Standard Contractual Clauses approved by the European Commission.<\/span><\/p>\n<ol start=\"8\">\n<li><b> Retention period<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In particular:<\/span><\/p>\n<table>\n<thead>\n<tr>\n<th>\n<p><b>Data category<\/b><\/p>\n<\/th>\n<th>\n<p><b>Retention period<\/b><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Browsing data<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary for the technical management and security of the site, except for the need to ascertain illegal activities<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to requests for information or spontaneous contacts<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to respond to the request and, normally, no longer than 12 months from the last contact, unless a further relationship is established<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to restaurant, lounge bar, swimming pool or similar service reservations<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to manage the booking and, subsequently, for a reasonable period connected to organizational, administrative or rights protection needs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to private, corporate events or dedicated initiatives<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to manage the request or event and, subsequently, for the period necessary to fulfill legal obligations or protect the rights of the Data Controller<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Special data relating to allergies, intolerances or dietary needs<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Only for the time necessary to manage the booking, event or service requested, unless otherwise required by law<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to gift cards, vouchers, memberships or experiences<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to manage the service and, subsequently, for the period necessary to fulfill legal obligations or protect the rights of the Data Controller<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to payments, invoices, receipts and administrative-accounting documentation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the period required by civil, fiscal and accounting legislation, normally 10 years<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data relating to newsletters and promotional communications<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Until you revoke your consent or request to unsubscribe<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Newsletter or marketing consent logs<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to demonstrate the correct collection of consent<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Images, photographs, videos or content published<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time of publication consistent with the informational, documentary or promotional purposes pursued, unless consent is revoked where the processing is based on consent<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Data processed for the protection of rights<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">For the time necessary to manage the dispute and in any case within the limits of the applicable limitation periods<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Upon expiration of the retention periods, the data will be deleted, anonymized, or retained exclusively where necessary to fulfill legal obligations or protect the Data Controller&#039;s rights.<\/span><\/p>\n<ol start=\"9\">\n<li><b> Links to third-party sites or social networks<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The site may contain links to third-party websites, social media pages, external platforms, mapping tools, booking systems, payment systems, commercial partners, or other online services.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This policy does not apply to data processing carried out by third parties or external platforms, for which the interested party is invited to consult the relevant privacy policies.<\/span><\/p>\n<ol start=\"10\">\n<li><b> Rights of the interested party<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The interested party may exercise, within the limits and under the conditions set forth in Articles 15 et seq. of the GDPR, the following rights:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain confirmation as to whether or not personal data concerning him or her is being processed;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">access your personal data;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain the rectification of inaccurate data or the integration of incomplete data;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain the deletion of data, in the cases provided for by the legislation;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain restriction of processing;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">oppose the processing, in the cases provided for by the legislation;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">receive the data in a structured, commonly used and machine-readable format, where applicable;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">revoke the consent given, without prejudice to the lawfulness of the processing carried out before the revocation;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">lodge a complaint with the Italian Data Protection Authority.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Requests may be sent to the Data Controller at the addresses indicated in this policy.<\/span><\/p>\n<ol start=\"11\">\n<li><b> Complaint to the Supervisory Authority<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">The interested party who believes that the processing of his\/her personal data is in violation of the applicable legislation has the right to lodge a complaint with the <\/span><b>Guarantor for the protection of personal data<\/b><span style=\"font-weight: 400;\">, according to the methods indicated on the Authority&#039;s institutional website.<\/span><\/p>\n<ol start=\"12\">\n<li><b> Updates to this policy<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This information may be updated over time, including due to regulatory, technical, or organizational changes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The interested party is therefore invited to consult this page periodically.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Last updated May 2026<\/span><\/p>\n<ul><!-- \/wp:paragraph --><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f7e4f60 e-con-full e-flex e-con e-parent\" data-id=\"f7e4f60\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f298563 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"f298563\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>INFORMATIVA PRIVACY (ai sensi degli artt. 13 e 14 del Regolamento UE 2016\/679) La presente informativa descrive le modalit\u00e0 di trattamento dei dati personali degli utenti che consultano il sito internet http:\/\/www.otiumrooftop.it\/ e\/o che utilizzano i servizi, i contenuti e i canali di contatto disponibili sul sito. L\u2019informativa \u00e8 resa esclusivamente per il presente sito [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy - Otium Rooftop<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/otiumrooftop.it\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - Otium Rooftop\" \/>\n<meta property=\"og:description\" content=\"INFORMATIVA PRIVACY (ai sensi degli artt. 13 e 14 del Regolamento UE 2016\/679) La presente informativa descrive le modalit\u00e0 di trattamento dei dati personali degli utenti che consultano il sito internet http:\/\/www.otiumrooftop.it\/ e\/o che utilizzano i servizi, i contenuti e i canali di contatto disponibili sul sito. L\u2019informativa \u00e8 resa esclusivamente per il presente sito [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/otiumrooftop.it\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Otium Rooftop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/otiumpeaclub\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-20T13:38:50+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/otiumrooftop.it\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy - Otium Rooftop\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#website\"},\"datePublished\":\"2022-12-30T11:18:18+00:00\",\"dateModified\":\"2026-08-20T13:38:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/otiumrooftop.it\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/otiumrooftop.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#website\",\"url\":\"https:\\\/\\\/otiumrooftop.it\\\/\",\"name\":\"Otium Rooftop\",\"description\":\"Rooftop \u2013 Lounge bar \u2013 Pool &amp; Spa\",\"publisher\":{\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/otiumrooftop.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#organization\",\"name\":\"Otium Rooftop\",\"url\":\"https:\\\/\\\/otiumrooftop.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/otiumrooftop.it\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Otium-rooftop-logo.png\",\"contentUrl\":\"https:\\\/\\\/otiumrooftop.it\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Otium-rooftop-logo.png\",\"width\":1000,\"height\":400,\"caption\":\"Otium Rooftop\"},\"image\":{\"@id\":\"https:\\\/\\\/otiumrooftop.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/otiumpeaclub\",\"https:\\\/\\\/www.instagram.com\\\/otiumrooftop\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - Otium Rooftop","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/otiumrooftop.it\/en\/privacy-policy\/","og_locale":"en_GB","og_type":"article","og_title":"Privacy Policy - Otium Rooftop","og_description":"INFORMATIVA PRIVACY (ai sensi degli artt. 13 e 14 del Regolamento UE 2016\/679) La presente informativa descrive le modalit\u00e0 di trattamento dei dati personali degli utenti che consultano il sito internet http:\/\/www.otiumrooftop.it\/ e\/o che utilizzano i servizi, i contenuti e i canali di contatto disponibili sul sito. L\u2019informativa \u00e8 resa esclusivamente per il presente sito [&hellip;]","og_url":"https:\/\/otiumrooftop.it\/en\/privacy-policy\/","og_site_name":"Otium Rooftop","article_publisher":"https:\/\/www.facebook.com\/otiumpeaclub","article_modified_time":"2026-08-20T13:38:50+00:00","twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/otiumrooftop.it\/privacy-policy\/","url":"https:\/\/otiumrooftop.it\/privacy-policy\/","name":"Privacy Policy - Otium Rooftop","isPartOf":{"@id":"https:\/\/otiumrooftop.it\/#website"},"datePublished":"2022-12-30T11:18:18+00:00","dateModified":"2026-08-20T13:38:50+00:00","breadcrumb":{"@id":"https:\/\/otiumrooftop.it\/privacy-policy\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/otiumrooftop.it\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/otiumrooftop.it\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/otiumrooftop.it\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/otiumrooftop.it\/#website","url":"https:\/\/otiumrooftop.it\/","name":"Otium Rooftop","description":"Rooftop \u2013 Lounge bar \u2013 Pool &amp; Spa","publisher":{"@id":"https:\/\/otiumrooftop.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/otiumrooftop.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/otiumrooftop.it\/#organization","name":"Otium Rooftop","url":"https:\/\/otiumrooftop.it\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/otiumrooftop.it\/#\/schema\/logo\/image\/","url":"https:\/\/otiumrooftop.it\/wp-content\/uploads\/2022\/12\/Otium-rooftop-logo.png","contentUrl":"https:\/\/otiumrooftop.it\/wp-content\/uploads\/2022\/12\/Otium-rooftop-logo.png","width":1000,"height":400,"caption":"Otium Rooftop"},"image":{"@id":"https:\/\/otiumrooftop.it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/otiumpeaclub","https:\/\/www.instagram.com\/otiumrooftop\/"]}]}},"_links":{"self":[{"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":12,"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":22394,"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/22394"}],"wp:attachment":[{"href":"https:\/\/otiumrooftop.it\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}