Data controller
Hotelnet S.r.l. — Corso Italia 68, 20122 Milan (MI), Italy. Email: privacy@hotel-net.it · Phone: +39 02 4547 2175.
This notice describes how we process the personal data of users who browse and interact with the hotel-net.it website, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
What data we collect
- Contact form data — first name, last name, email, phone (optional), property name and city (optional), role and message. These are the data you provide voluntarily to receive a reply.
- Newsletter sign-up data — email address, when you choose to subscribe to updates.
- Browsing data (logs) — IP address, browser and device, requested URLs, date and time. Collected automatically by the hosting infrastructure for security and diagnostics.
- Analytics data — aggregated, anonymous pageviews and events, collected via PostHog in cookie-free mode and not linked to a persistent identifier.
- Cookie consent preferences — the record of the consent you give (see Cookie Policy).
We do not collect special categories of data (Art. 9 GDPR) and we do not carry out profiling or automated decision-making.
Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to a contact request | Pre-contractual measures at your request (Art. 6.1.b) | 24 months from last interaction |
| Sending the newsletter | Consent (Art. 6.1.a) | Until consent is withdrawn |
| Aggregated traffic statistics | Legitimate interest (Art. 6.1.f) | 12 months |
| Security and abuse prevention (logs) | Legitimate interest (Art. 6.1.f) | 6 months |
| Cookie consent management | Legal obligation (Art. 6.1.c) | 12 months |
How we process data
Data are processed using IT tools, with appropriate technical and organisational measures to ensure their security and confidentiality, and are accessible only to authorised staff and to the processors listed below.
Processors and recipients
To deliver the service we rely on third-party providers who process data on our behalf as processors (Art. 28 GDPR):
- Microsoft Azure Communication Services (EU) — email delivery from contact forms.
- Airtable, Inc. (USA) — automatic lead, contact and newsletter signup creation from forms.
- PostHog (EU Cloud, Frankfurt) — cookie-free aggregated statistics.
- Microsoft Azure (Static Web Apps, West Europe) — website hosting.
- Usercentrics A/S — Cookiebot (Denmark) — cookie consent management.
Data are not disclosed or sold to third parties for the marketing purposes of parties other than the Controller.
Transfers outside the EU
Hosting, analytics and consent management operate from data centres within the European Union. Airtable (USA) receives data submitted through the forms (contact and newsletter): the transfer is based on Standard Contractual Clauses approved by the European Commission.
Your rights
Under Articles 15-22 GDPR you may at any time:
- access your data and obtain a copy;
- rectify or erase them ("right to be forgotten");
- restrict or object to processing based on legitimate interest;
- request portability in a structured format;
- withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise them, write to privacy@hotel-net.it: we reply within 30 days. You may also lodge a complaint with the Italian supervisory authority, the Garante per la Protezione dei Dati Personali (garanteprivacy.it).
Changes to this notice
This notice may be updated to reflect legal or processing changes. The last-revision date is shown at the top of the page; material changes will be flagged on the site.