Privacy Policy

Information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

1. Data Controller

The Data Controller of personal data is Stella Holding S.r.l., with registered office at Corso Garibaldi 49, 20121 Milan, Italy (hereinafter, the “Controller”).

For any information regarding the processing of personal data, the Controller can be contacted at [email protected].

2. Types of personal data processed

Through the website www.ahoma.club (hereinafter, the “Website”), the Controller may collect and process the following categories of personal data.

Data voluntarily provided by the user
First and last name, email address, phone number, residence or domicile address, data necessary for booking a stay (such as stay dates, number of guests, preferences), as well as any communications sent by the user through contact forms or email.

Data necessary for booking management
Accommodation and stay bookings are managed through the Lodgify platform, which collects and processes personal data such as guest identification data, contact details, booking information and payment data. Payment data are processed directly by payment service providers and are not stored by the Controller.

Browsing data
The computer systems and software procedures used to operate the Website automatically acquire certain personal data, including IP address, device and browser type, operating system and data relating to interaction with the Website. Such information is not collected in order to be associated with identified individuals, but may allow users to be identified through processing and association with data held by third parties.

3. Cookies and tracking technologies

The Website uses cookies and tracking tools, including third-party cookies, to ensure proper functioning of the site, improve the browsing experience and collect aggregated statistical information.

Detailed information on the types of cookies used, their purposes, duration and consent management methods is available in the dedicated Cookie Policy.

4. Purposes of processing

Personal data are processed for the following purposes:

• technical management and operation of the Website, including security, abuse prevention and aggregated statistics

• management of user requests submitted through the Website or by email

• management of bookings and stays, including operational communications before and after the stay

• compliance with legal obligations of a fiscal, accounting, administrative or public security nature

5. Legal basis for processing

The processing of personal data is based on the following legal grounds:

• performance of a contract or pre-contractual measures, for booking management and user requests

• compliance with legal obligations

• the Controller’s legitimate interest, in particular for website security, technical monitoring and service improvement

• the user’s consent, where required, especially for non-technical cookies as described in the Cookie Policy

The provision of necessary data is essential in order to use the services offered. Failure to provide such data may result in the inability to process requests or bookings.

6. Methods of processing

Personal data are processed using electronic and IT tools, in compliance with the principles of lawfulness, fairness, transparency and data minimisation. Appropriate technical and organisational measures are adopted to ensure data security and confidentiality.

7. Data disclosure and recipients

Personal data may be disclosed to authorised personnel and collaborators of the Controller, technical and IT service providers, Lodgify as booking platform, as well as to authorities or subjects where disclosure is required by law.
Personal data will not be publicly disclosed.

8. Data transfer outside the EU

Some service providers may involve the transfer of personal data to countries outside the European Union. In such cases, transfers are carried out in compliance with Articles 44 et seq. of the GDPR, through adequacy decisions or standard contractual clauses.

9. Data retention period

Personal data are retained for the time necessary to manage requests and bookings, for the period required by applicable legal obligations and, in any case, for no longer than necessary to fulfil the purposes for which they were collected. Users may request deletion of their data within the limits set by applicable law.

10. Data subject rights

Pursuant to Articles 15–22 of the GDPR, users have the right to access their personal data, request rectification or updating, erasure or restriction of processing, and to object to processing where applicable.
Users also have the right to lodge a complaint with the competent Data Protection Authority.

These rights may be exercised by contacting the Controller at [email protected].

11. Updates to this Privacy Policy

This Privacy Policy may be updated or amended at any time. Users are encouraged to review it periodically.