Privacy, cookies and legal notice

Data controller

Do.Ma Property Management, owned by Federico Mandalà, VAT no. 04105101200, Via Liguria 16, 40139 Bologna, Italy. Email direzione.do.ma@gmail.com, phone +39 329 763 4840.

What data we process

The data you enter in our forms (name, email, phone, company or institution, number of guests, dates, message); the data you send us on WhatsApp or by email; the data you enter in the booking engine to book; technical browsing data (such as IP address and server logs) processed by our hosting provider for security.

Why we process it and on what legal basis

To answer requests and prepare offers (pre-contractual steps, art. 6.1.b GDPR); to manage your booking and stay (contract, art. 6.1.b); to meet legal obligations linked to the stay, such as reporting guests to the police (art. 109 of the Italian Public Security Act), the city tourist tax and ISTAT statistics (legal obligation, art. 6.1.c); to protect the site from abuse (legitimate interest, art. 6.1.f). We do not profile you and we send no promotional messages without your consent.

Providing your data

A name and a contact detail are needed to reply. Without them we cannot handle your request.

Who receives the data

Providers acting on our behalf as processors: Aruba S.p.A. (website hosting and email) and Krossbooking (property management system and booking engine). If you choose to write to us on WhatsApp, the service is provided by WhatsApp Ireland Limited (Meta group) under its own privacy notice. Tax and legal advisers bound by professional secrecy, and authorities where the law requires it. Data is never published or sold.

Transfers outside the European Union

If a provider transfers data outside the European Union, for example to the United States, this only happens with the safeguards set out in articles 44 and following of the GDPR, such as the Data Privacy Framework or standard contractual clauses.

How long we keep the data

Requests that do not turn into a booking for 12 months. Booking data and accounting records for the period required by law (10 years for accounting records, art. 2220 Italian Civil Code). Technical logs for the period set by the hosting provider for security purposes.

Your rights

You can ask for access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR) by writing to direzione.do.ma@gmail.com. You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookie policy

This site sets no profiling or analytics cookies. Fonts and libraries are hosted on our own server, with no calls to Google Fonts or other tracking services. Only technical tools needed for operation and security may be used: browser session storage used by the Krossbooking booking engine (loaded from data.krossbooking.com) and the hosting provider's protection system. These tools do not require consent (art. 122 of the Italian Privacy Code and the Italian DPA guidelines of 10 June 2021). Links to WhatsApp, Google Maps, Airbnb and other sites lead to external services with their own notices. Links to GetYourGuide, Civitatis and Stasher are affiliate links: if you book we receive a commission at no cost to you; these services apply their own privacy notices. The GetYourGuide activities box on the "Things to do in Bologna" page loads only if you click "Show activities" and may set GetYourGuide cookies.

Legal notice

This site is run by Do.Ma Property Management, owned by Federico Mandalà, VAT no. 04105101200, registered office Via Liguria 16, 40139 Bologna, Italy. Contact: direzione.do.ma@gmail.com, +39 329 763 4840. Information provided under art. 7 of Italian Legislative Decree 70/2003. Each stay shows on its page the National Identification Code (CIN) required by art. 13-ter of Decree-Law 145/2023. Texts and photographs belong to their respective owners and may not be reproduced without permission.