Last updated: July 2026

1. Who we are – Data Controller

This policy describes how the personal data of users visiting the website www.miticohotel.it and interacting with the services offered therein is processed.

Data Controller
MITICO HOTEL & NATURAL SPA
Registered office: Via Ferrarese 164 – 40128 Bologna (Italy)
VAT number: 02584821207
Phone: +39.051.4161311
Email: reservation@miticohotel.it
Website: www.miticohotel.it

Data Protection Officer
Cristian Lami (contactable at the email address above)

This policy applies exclusively to the website www.miticohotel.it and does not apply to other websites that may be consulted by the user via links present on this site.

2. Types of data processed and purposes of processing

a) Data provided voluntarily by the user

Sending messages voluntarily via the appropriate contact forms or via email to the addresses indicated on this site involves the acquisition of the sender’s email address and any other personal data included in the request. Such data is used solely to respond to the user’s request.

b) Browsing data (technical data)

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing, allow users to be identified.

This category includes:

• IP addresses or domain names of the computers used by users;
• URI (Uniform Resource Identifier) addresses of the requested resources;
• Date and time of the request;
• Method used to make the request;
• Size of the response file;
• Numeric code indicating the status of the server response;
• Other parameters relating to the user’s operating system and computer environment.

This data is used exclusively for:

• Obtaining anonymous statistical information on the use of the site;
• Checking the correct functioning of the site.

Browsing data is deleted immediately after processing and may only be used by the Judicial Authority to ascertain liability in the event of hypothetical computer crimes against the site.

c) Purposes of processing

Personal data provided voluntarily by users may be processed for the following purposes:

1. Managing the customer relationship (e.g. responding to information requests, managing bookings, sending confirmations);
2. Carrying out the company’s own business activities;
3. Direct marketing purposes (only with the user’s explicit consent, as described in point 4);
4. Sending customer satisfaction surveys and market research (only with consent).

d) Data collected for bookings

If the user makes a booking at the facility, the following will be requested:

• First and last name;
• Address;
• Phone number;
• Email address;
• Credit card number (for booking guarantee);
• Room preferences.

This data is used exclusively to process and handle the requested booking. The company will use the email address to send the booking confirmation and, if necessary, may contact the user to obtain further data necessary for processing the booking itself.

3. Legal basis for processing

The processing of personal data is carried out on the basis of the following legal conditions (pursuant to Art. 6 of the GDPR):

• Performance of a contract or pre-contractual measures (Art. 6, para. 1, let. b): for managing information requests, quotes and bookings;
• Explicit consent of the data subject (Art. 6, para. 1, let. a): for direct marketing and profiling purposes;
• Legitimate interest of the Controller (Art. 6, para. 1, let. f): for improving the services offered and for the security of the site.

4. Direct marketing and commercial communications

With your explicit consent (via a specific non-pre-selected checkbox), MITICO HOTEL & NATURAL SPA may use your contact details to send you:

• Newsletters;
• Special offers and promotions;
• Commercial communications on new products and services;
• Periodic satisfaction surveys.

Consent is optional and revocable at any time.
To revoke consent or object to the sending of commercial communications, you can write at any time to: reservation@miticohotel.it.

In the absence of marketing consent, your data will be used exclusively to respond to your request or to manage the booking, without this in any way prejudicing the requested service.

5. Processing methods and data retention

Personal data is processed using automated and non-automated tools, in compliance with the principles of correctness, lawfulness, transparency and confidentiality. Specific security measures are adopted to:

• Prevent data loss;
• Avoid unlawful or incorrect use;
• Prevent unauthorised access to the database.

Data is kept for the time strictly necessary to achieve the purposes for which it was collected. In particular:

• Contact details (information requests): stored for the time necessary to handle the request, in any case no more than 12 months;
• Booking data: stored for the entire duration of the contractual relationship and for the subsequent 10 years (as required by tax regulations);
• Marketing data: stored until consent is revoked.

6. Communication and disclosure of data

Personal data is not disclosed to third parties, but may be communicated to:

• Internal company staff, duly authorised and trained;
• External suppliers (e.g. site maintenance companies, IT service providers, booking management platforms) acting as Data Processors pursuant to Art. 28 of the GDPR.

The updated list of Data Processors is available on request by writing to reservation@miticohotel.it.

7. Rights of the data subject (Art. 15-22 GDPR)

At any time, the user has the right to exercise the following rights:

1. Access (Art. 15): obtain confirmation as to whether or not their data is being processed and obtain a copy;
2. Rectification (Art. 16): obtain the correction of inaccurate data or the completion of incomplete data;
3. Erasure (Art. 17): obtain the deletion of their data (“right to be forgotten”);
4. Restriction (Art. 18): obtain the restriction of processing;
5. Portability (Art. 20): receive their data in a structured format and transmit it to another controller;
6. Objection (Art. 21): object at any time to processing for legitimate reasons;
7. Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can write to:
MITICO HOTEL & NATURAL SPA – Via Ferrarese 164 – 40128 Bologna
Email: reservation@miticohotel.it

You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali) if you believe your rights have been violated: www.garanteprivacy.it.

8. Cookies

The site www.miticohotel.it uses cookies to ensure the correct functioning of the site, improve the browsing experience and collect anonymous statistics.

What are cookies?

Cookies are small text files that the websites visited send to the user’s browser, where they are stored and then retransmitted to the same sites on the next visit.

Types of cookies used

Technical cookies (session)

These are essential for the functioning of the site and allow navigation and use of the requested features. They are automatically deleted when the browser is closed.

Persistent cookies

These remain stored on the user’s computer until they expire or are manually deleted. They are used to personalise browsing based on the device used.

Third-party cookies

Google Analytics
The site uses Google Analytics (Google Inc.) to collect anonymous statistical information on visits.

• Policy: https://www.google.com/intl/en/analytics/privacyoverview.html
• Google Privacy: https://www.google.com/intl/it/privacy/privacy-policy.html
• Opt-out: https://tools.google.com/dlpage/gaoptout

Google Adwords and Remarketing
The site may use cookies to monitor Google advertising campaigns and for remarketing activities.

• More information: https://www.google.es/intl/it/policies/privacy/

Facebook Cookies
The site may use Facebook Inc. cookies to monitor Facebook Ads campaigns and remarketing activities.

• More information: https://www.facebook.com/help/cookies/

How to disable cookies

The user can object to the registration of cookies on their device by configuring the browser:

• Google Chrome: Settings → Show advanced settings → Privacy → Content settings → Cookies
• Mozilla Firefox: Options → Privacy → Show advanced settings → Content settings
• Internet Explorer: Tools → Internet Options → Privacy → Settings
• Safari: Safari → Preferences → Privacy → Block cookies
• Opera: Preferences → Advanced → Cookies

For more information on disabling third-party cookies: www.youronlinechoices.com.

9. Changes to this policy

This policy may be subject to periodic changes. Users are invited to regularly consult this page to view the latest updated version. The update date is indicated at the top of this page.