Last updated: 9 February 2026

​

This Privacy Policy describes how the website https://www.magnoliastudioapartment.com/ (the “Website”) processes the personal data of users who browse or interact with it, in accordance with Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive, and applicable Italian and international data protection laws. The structure and level of detail of this policy are aligned with internationally adopted compliance standards.

​

1. Data Controller

​

The Data Controller of the personal data processed through this Website is:

​

Magnolia Studio Apartment
Location: Via Lunense, 35, 54033 Carrara MS, Italia
Email: magnoliastudio​​apartment@gmail.com

​

The Data Controller determines the purposes and means of the processing of personal data.

​

2. Types of data processed

​

a) Browsing data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols, such as:

​

• IP addresses;

• domain names of the devices used by users;

• URI addresses of requested resources;

• date and time of requests;

• technical parameters related to the user’s operating system and browser.

​

These data are used exclusively to obtain anonymous statistical information on the use of the Website, to ensure its proper functioning, and to maintain security.

​

b) Data provided voluntarily by the user

When users contact the Data Controller via the contact form available on the Website or via email, the following personal data may be collected:

​

• first and last name;

• email address;

• phone number;

• subject of the request;

• message content.

​

Providing these data is voluntary; however, failure to provide mandatory fields may prevent the submission of the request and the ability to receive a response.

​

c) Data related to accommodation requests

If the Website allows users to request availability or information about accommodation, additional data may be processed, such as check-in and check-out dates and other information strictly necessary to manage the request.

 

3. Purposes of processing

​

Personal data are processed for the following purposes:

​

• to enable navigation and proper functioning of the Website;

• to respond to information or contact requests;

• to manage pre-contractual or contractual communications related to accommodation;

• to comply with legal or regulatory obligations;

• to protect the rights and legitimate interests of the Data Controller;

• to improve user experience and Website performance.

​

4. Legal basis for processing

​

The processing of personal data is based on one or more of the following legal grounds:

​

• the user’s consent;

• performance of pre-contractual or contractual measures;

• compliance with legal obligations;

• the legitimate interest of the Data Controller in ensuring the proper functioning and security of the Website.

​

5. Processing methods

​

Personal data are processed using electronic and IT tools, with appropriate technical and organizational security measures in place to ensure confidentiality, integrity, and availability of the data.

​

6. Data retention

​

Personal data are retained only for as long as necessary to achieve the purposes for which they were collected, unless longer retention periods are required by applicable laws.

​

7. Data sharing and disclosure

​

Personal data will not be publicly disclosed. They may be shared with third parties providing services necessary for the operation of the Website or accommodation activity (e.g. hosting providers, IT service providers, technical consultants), who will process the data as Data Processors or independent Data Controllers, in compliance with applicable data protection laws.

Where data are transferred outside the European Economic Area, such transfers will take place in accordance with GDPR provisions, including the use of adequacy decisions or standard contractual clauses, where applicable.

​

8. Data subject rights

​

Users may exercise, at any time, the rights provided under Articles 15–22 of the GDPR, including:

​

• access to their personal data;

• rectification or updating of data;

• erasure of data (right to be forgotten);

• restriction of processing;

• objection to processing;

• data portability;

• withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal;

• lodging a complaint with the competent Data Protection Authority.

​

Requests may be sent to the contact details provided in Section 1.