Privacy

Personal data processing notice

Under Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law, this notice explains how data collected through this website and bookings at The King of Milan are processed.

1. Data controller

The data controller is Imm.pa snc, based at via Roberto Lepetit 19 D, Milan, Italy. Email: imm.pa.snc@gmail.com.

2. Categories of data

Website use and booking enquiries may involve identity and contact data (name, surname, email, telephone) voluntarily provided through contact or enquiry forms; booking data (stay dates, guest numbers, preferences, special requests and billing details); browsing data (IP address, browser technical data and pages visited), collected in aggregate and anonymous form for statistics and security; technical cookies and, only with consent, analytics or profiling cookies. See any dedicated Cookie Policy for further details.

3. Purposes and legal bases

Enquiries and bookings: responding through the website or other channels (WhatsApp, email, OTAs), and entering into or managing the stay contract. Legal basis: pre-contractual measures and contract performance (Article 6(1)(b) GDPR).

Legal and tax obligations, including guest registration and public security requirements: compliance with law (Article 6(1)(c)).

Security and protection of the controller’s rights in or out of court: legitimate interests (Article 6(1)(f)).

Stay-related information and courtesy messages, including check-in, check-out and follow-ups: contract performance or legitimate interests. These are not mass commercial newsletters.

Statistics using aggregate anonymous data to improve services: legitimate interests.

4. Processing methods

Data are processed electronically and, where necessary, on paper, using appropriate technical and organisational safeguards for security and confidentiality, following lawfulness, fairness and data minimisation principles.

5. Retention

Personal data are retained only as long as necessary for their purposes and then for periods required by civil, tax and public security law. Statistical data are processed in aggregate and anonymous form.

6. Recipients

Data may be shared with the controller’s tax, legal and administrative advisers; technical service providers (hosting, website management and booking systems); and competent authorities where required by law. No systematic transfer outside the EU is envisaged, except through services applying appropriate GDPR safeguards.

7. Your rights

You may exercise rights under Articles 15–22 GDPR: confirmation of processing; access, correction or updating; erasure where applicable; restriction or objection where available; and data portability where applicable. You may complain to the Italian Data Protection Authority (www.garanteprivacy.it). To exercise your rights, email imm.pa.snc@gmail.com.

Cookies and measurement

Current status: Google Analytics, Google Ads and Meta Pixel are inactive. Technical hosting logs may contain IP addresses and must not automatically be treated as anonymous. External availability forms, calendars and maps receive technical data when loaded. Optional analytics and advertising measurement, if enabled, will require consent, which can be withdrawn through Cookie preferences. For details about services and stored choices, see the Cookie Policy.