Privacy Policy
Last updated: 13th Feb 2026
1. Data Controller
The Data Controller of this website is:
LA LU COZY ROOM 2 SAS DEL PROF. FOCOSI FRANCESCO & C.
VAT Number: 02491150500
Tax Code: 02491150500
Registered Office: Via Gaetano Malasoma 24, 56121 Pisa, Italy
Email: vatican.roomsandapartments @ gmail.com
2. Types of Data Collected
a) Contact Form Data
When users fill in the contact form, we collect:
- First name
- Email address
- Phone number
- Message content
These data are voluntarily provided by the user.
b) Booking Widget (Octorate)
Our website includes a booking widget provided by Octorate. When users proceed with a booking, they are redirected to the Octorate platform.
All personal data entered during the booking process (such as identification data, contact details, payment details, etc.) are processed directly by Octorate according to their own Privacy Policy. We encourage users to review Octorate’s Privacy Policy before completing a booking.
3. Purpose of Processing
Personal data collected through the contact form are processed for the following purposes:
- To respond to inquiries and information requests
- To provide pre-contractual information
- To manage booking-related communications
- To fulfill legal obligations
Data are processed lawfully under Article 6 of the GDPR, based on:
- User consent
- Pre-contractual measures
- Legal obligations
4. Data Retention
Personal data are retained only for the time necessary to fulfill the purposes for which they were collected, and in compliance with applicable legal obligations.
Contact form data may be retained for administrative or legal purposes if necessary.
5. Hosting and Technical Infrastructure
This website is hosted by:
SupportHost
Hosting provider located within the European Union.
Personal data may be processed on servers located in the EU.
The website is built using Elementor, a WordPress page builder. Elementor does not independently process personal data unless explicitly enabled features are used.
No analytics or statistical tracking systems are currently active on this website.
6. Data Sharing
Personal data will not be sold or transferred to third parties, except:
- To technical service providers strictly necessary for website operation (e.g., hosting provider)
- To Octorate, in relation to booking management
- When required by law or competent authorities
All processors operate in compliance with the GDPR.
7. User Rights
In accordance with Articles 15–22 of the General Data Protection Regulation (EU) 2016/679 (GDPR), users have the right to:
- Access their personal data
- Request rectification or erasure
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
Requests can be sent to the Data Controller at the email address indicated above.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
8. Security Measures
We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.
9. Changes to This Privacy Policy
This Privacy Policy may be updated at any time to reflect regulatory or operational changes. Users are encouraged to review this page periodically.