Privacy notice
What we know about you, and why.
This website collects very little: what you enter in the contact form and the technical data recorded by any web server. This is the complete list, in plain language.
Last reviewed: 26 August 2026
Text awaiting professional review. The controller’s details, the services used and the retention periods have been added; the legal wording still needs approval before final publication.
Who controls the data
The data controller is Mazal 23 S.R.L.S., VAT no. 17284741000, with registered office at Via Tacito 23, 00193 Roma. The guest house is at Piazza Adriana 5, 00193 Rome. For any request, email tacito23lr@gmail.com.
What we collect
If you complete the contact form, we collect only the fields shown in the form:
- Name
- So we know who we are speaking with and can address you by name.
- Telephone (optional)
- Only if you would prefer a call or telephone reply.
- To reply to your message.
- Message
- The request itself: dates, number of guests and any questions.
None of this information is used for marketing, and submitting the form does not subscribe you to a newsletter. It is used only to reply to you.
If you only browse the website, the server records technical request data — IP address, time of visit, requested page and browser type — as any web server does. This is needed to operate the website and protect it from abuse.
If you book, your booking information is processed through the Octorate booking engine. Its own privacy notice is shown during the booking process.
How long we keep it
Messages sent through the contact form and technical server logs are kept for 12 months and then deleted. Operational booking data is also kept for 12 months after the stay, unless a legal obligation requires a longer period. Octorate states the retention periods for data handled directly by its service in its own notice.
Legal bases
We use contact and booking information to answer a request or perform the accommodation contract, including steps requested before booking (Article 6(1)(b) GDPR). Technical logs are processed for our legitimate interest in keeping the website secure and operational (Article 6(1)(f)). Information required for tax, public-security or other statutory duties is processed to comply with a legal obligation (Article 6(1)(c)). The contact-form checkbox confirms that you have read this notice; it is not the legal basis for replying to your request.
Who receives it
We do not sell or disclose personal information to third parties for their own purposes. The following suppliers process it on our behalf because their services are required to operate the website:
| Service | Purpose | Data involved |
|---|---|---|
| Vercel | Website hosting | IP address and technical request data in server logs. |
| Octorate | Booking engine | Dates, number of guests and the information entered during the booking process. |
| unpkg.com | Content delivery network used by the Octorate widget | IP address, as with any request to an external server. |
| Google Maps | Map on the contact page | IP address and browser identifiers if you choose to load the map. |
| Resend | Delivery of contact-form messages | Name, optional telephone number, email address and message text while the message is delivered. |
| Google (Gmail) | Mailbox receiving the messages | The same form information once delivered to the guest house mailbox. |
| Google Analytics | Visit statistics | Pages visited, traffic source, device and approximate location (city/country), in aggregate form. |
Your rights
Under the GDPR you may request access to, correction or deletion of your personal information, restriction of processing, data portability, and object to processing where applicable. You may withdraw any optional consent at any time without affecting processing that took place beforehand.
To exercise these rights, email tacito23lr@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority.
Cookies and external content
The website does not use profiling cookies. Optional maps and other external content load only with your permission: see the cookie page for details.