Privacy notice

Data controller

Royal Palace Rooms S.r.l.s., the company that runs Royal Palace B&B. Registered office: Via Gennaro Tescione 6, 81100 Caserta (CE), Italy; VAT number and tax code 04831150612.

For any question about your data: info@royalpalacecaserta.it, certified email (PEC) royalpalacebnb@pec.it, phone +39 366 990 3798.

What data we process

When you send a request through the form: name, email, phone number if you give it, dates of stay, number and ages of guests, preferred room, parking, pets and your message.

If you write to us on WhatsApp or by email, or call us, we process the data you share that way.

When you visit the website, the server and Cloudflare log the technical data of each request for security: IP address, date and time, page requested and browser type.

When you fill in the form, Cloudflare’s anti-bot check (Turnstile) examines some technical data about your browser and device, together with your IP address, only to tell whether a person or an automated program is writing.

Why and on what legal basis

To answer your request and arrange your stay: steps taken at your request before a contract (Art. 6(1)(b) of Regulation (EU) 2016/679).

If the request becomes a booking, also to meet legal obligations: guest registration with the police (Questura), tourist tax, tax rules (Art. 6(1)(c)).

To protect the website and the form from abuse, spam and attacks, including with the anti-bot check: the controller’s legitimate interest (Art. 6(1)(f)).

Without the required form fields (dates, name and email) we cannot reply. We make no automated decisions and do no profiling.

How long we keep it

Requests that do not become a booking are deleted within 12 months. Booking data is kept for as long as Italian tax and public-security rules require.

The server’s technical logs are deleted after 7 days. If a request cannot be delivered, it stays on the server only for as long as it takes to deliver it.

Who receives it

The data is processed by the controller, with the help of providers acting on its behalf as processors (Art. 28 of the Regulation):

Hetzner Online GmbH (Germany), which hosts the website; Cloudflare, Inc. (United States), which protects and speeds up the website, runs the form’s anti-bot check and forwards email sent to info@royalpalacecaserta.it; Resend (Plus Five Five, Inc., United States), which delivers the form requests; Microsoft (Outlook), which provides the controller’s mailbox; Leone Ventures, the agency that runs the website.

We do not sell or pass data to third parties for marketing. If you choose WhatsApp, the conversation goes through WhatsApp Ireland Limited (Meta group), under its own terms.

Transfers outside the European Union

Cloudflare, Resend and Microsoft may process data in the United States. Cloudflare and Microsoft take part in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023; for Resend the transfer relies on the standard contractual clauses approved by the Commission (Art. 46 of the Regulation).

Cookies

The website uses no profiling, analytics or advertising cookies. Details are in the cookie policy.

Your rights

You can ask at any time for access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest (Arts. 15–22 of the Regulation), by writing to info@royalpalacecaserta.it or to the certified email royalpalacebnb@pec.it.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

If anything changes, we update this page and the date at the top.