Skip to content

Legal information

Privacy policy

Draft to be validated

This text is a draft reworked from the content published on the current ostelzzz.com website. Before publication it must be reviewed and approved by the client and their legal advisor. The page is set to noindex.

The client's legal texts are published in Italian only. This English version is a working translation: in case of any discrepancy the Italian version prevails (Terms & Conditions, art. 15).

Pursuant to Regulation (EU) 2016/679 (the “GDPR”) and to Legislative Decree 196/2003 as amended, ZZZleepandGo S.r.l. (the “Controller”) provides the following information on the personal data collected through the website www.ostelzzz.com and in connection with the services of the Ostelzzz hostel.

1. Data controller

ZZZleepandGo S.r.l., registered office in Via della Repubblica 26, 18100 Imperia (IM), operating office in Via Giorgio Jan 5, 20129 Milan (MI), in the person of its legal representative Gianmaria Leto.

2. Purposes and legal basis of the processing

A. Contractual and legal purposes

Data is processed, without the need for consent, in order to perform the accommodation contract (booking, check-in, notifications to the public security authorities, invoicing) and to comply with obligations laid down by national and European laws and regulations, as well as to respond to requests from administrative or judicial authorities.

B. Commercial and marketing purposes

Subject to explicit consent, which may be withdrawn at any time, data may be processed to send the Controller's commercial and promotional communications.

C. Website usage statistics

Only with your consent, which you can withdraw at any time from "Cookie preferences" at the bottom of every page, we use Google Analytics 4 to measure statistically how the site is used. Processing takes place through the cookies described in the cookie policy and the data is kept for 14 months. In aggregate form and without cookies we also measure visits with Cloudflare Web Analytics.

3. How data is processed

Processing is carried out both on paper and by electronic means, with measures adequate to guarantee security and confidentiality. The Controller does not use automated decision-making or profiling.

4. Recipients of the data

Data is processed by the Controller's authorised staff and may be disclosed to: bodies and institutions to which disclosure is mandatory by law; service companies and technology suppliers (including the booking system); legal and tax advisors; banks; judicial authorities and other public bodies.

5. Transfers outside the EU

The Controller does not transfer data to third countries or to international organisations.

6. Retention period

Data is kept for as long as necessary for the purposes for which it was collected and, afterwards, for the periods required by law (in particular tax and public security obligations).

7. Nature of the provision of data

Providing data for contractual purposes is optional but necessary: without it the booking and the stay cannot be managed. Providing data for marketing purposes is entirely optional and a refusal does not affect the service.

8. Rights of the data subject

You may exercise the rights set out in articles 15-22 of the GDPR: access, rectification, erasure, restriction, objection to processing and data portability. To do so, write to info@zzzleepandgo.com.

9. Complaint to the supervisory authority

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza di Monte Citorio 121, 00186 Rome — garante@gpdp.it — www.garanteprivacy.it.

10. Changes

The Controller may update this notice: the version published on this page is always the one in force.