Issued pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) for users of the website www.vecchiomaso.it. Last updated: 25 September 2026.

1. Data Controller

The Data Controller for personal data collected through the website www.vecchiomaso.it is:

Turismo Trentino Iniziative Srl – operator of Relais Vecchio Maso

Registered office: Strada del Monastero di Sant’Anna, 2 – 38123 Trento (TN), Italy
VAT number: 02468160227
Website: https://www.vecchiomaso.it
Email: info@vecchiomaso.it – Phone: +39 0461 866615

For any request regarding the processing of your personal data you can also write to: patrick.zampol@alpencityhotels.com

2. What data we collect

Depending on how you interact with us, we may collect the following categories of data:

• Contact details you voluntarily provide through the “Write to us” form on the Contact page (full name, phone number, email, message content);
• Details provided when requesting or confirming a booking, including via the Slope online booking engine (booking.slope.it), operated by an independent third-party provider;
• Data exchanged if you contact us via WhatsApp, processed under WhatsApp/Meta’s terms of service;
• Data provided when purchasing a gift voucher through the Vouchiva platform;
• Browsing and cookie data automatically collected while visiting the site (IP address, browser type, pages visited), as described in our Cookie Policy;
• Data required by law at check-in (e.g. reporting to local police authorities, tourist tax), collected directly on site and not through the website.

3. Purposes and legal basis for processing

We process your personal data for the following purposes:

• Responding to information or contact requests — legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR);
• Managing your booking request and your stay at the Relais — legal basis: performance of a contract (Art. 6(1)(b) GDPR);
• Fulfilling accounting, tax and public safety obligations (e.g. guest registration, tourist tax) — legal basis: legal obligation (Art. 6(1)(c) GDPR);
• Analysing aggregated website usage through Google Analytics, only after your consent to statistical cookies — legal basis: consent (Art. 6(1)(a) GDPR);
• Any promotional communications by email, only if you expressly opt in to a newsletter or similar sign-up in the future — legal basis: consent (Art. 6(1)(a) GDPR).

Providing the data needed to handle a contact request or a booking is optional, but failing to provide it may make it impossible for us to fulfil the request.

4. Who we share your data with

Your personal data may be shared, strictly to the extent necessary for the purposes indicated, with the following recipients:

• Slope – provider of the online booking engine used by the website (booking.slope.it);
• Vouchiva – platform used to sell and issue gift vouchers;
• Google Ireland Limited – provider of Google Analytics, with possible transfer of aggregated data to the United States based on the Standard Contractual Clauses approved by the European Commission;
• WhatsApp Ireland Limited / Meta – if you choose to contact us via WhatsApp, processed under that service’s own terms, which may involve transfers outside the EU;
• Aruba S.p.A. – provider of the website’s hosting service, with servers located in Italy;
• Consultants, accountants, credit institutions and public authorities, exclusively where necessary to fulfil contractual or legal obligations.

We do not sell or share your personal data with third parties for marketing purposes unrelated to Relais Vecchio Maso.

5. How long we keep your data

• Data relating to bookings and stays: for the period required by tax and civil law obligations (typically 10 years from the end of the relationship);
• Contact data not followed by a booking: for the time needed to respond and in any case no longer than 24 months, unless you give a different consent;
• Data processed on the basis of consent (e.g. statistics, any future newsletter): until you withdraw your consent.

6. Your rights

As a data subject, at any time you may exercise the rights set out in Articles 15-22 of the GDPR, including:

• Right of access to your personal data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”), in the cases provided by law;
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing;
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights you can contact us using the details given in point 1. You also always have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if you believe the processing of your data breaches applicable law.

7. How we process your data and keep it secure

Your data is processed using electronic tools and, to a minor extent, paper-based records, with methods strictly related to the purposes indicated above and, in any case, in a way that ensures its security and confidentiality. We adopt appropriate technical and organisational measures to protect your data from unauthorised access, loss, destruction or unlawful disclosure.

8. Minors

The website is not aimed at minors under 16 years of age, and we do not knowingly collect personal data from minors without the consent of a parent or legal guardian. Bookings and contact requests through the website must be made by adults.

9. Cookies

The website uses technical, statistical and, subject to consent, marketing cookies. For a detailed list of the cookies used, their duration and how to manage your preferences, please see our dedicated Cookie Policy.

10. Changes to this notice

We may update this notice from time to time, for example following regulatory changes or the introduction of new services on the website. The most up-to-date version is always available at this address, with the date of the last update shown at the top of the page.