Legal
Privacy notice
Last updated: August 2026
This notice explains how we handle the personal data of people who visit this site, ask us for information, or stay at Navona Rubens Lodge and Navona Bernini Lodge. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the GDPR).
1. Who is responsible
The data controller is JOY 4 SRL, of Via Magna Grecia 30/A, 00183 Rome, Italy, tax code / VAT number 18413571003, certified email joy4srl@legalmail.it.
For anything concerning your personal data, write to info@navonalodge.com.
2. What we collect, and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering an availability or information request | Name, email, phone, dates, number of guests, your message | Art. 6(1)(b) — steps taken at your request before a contract | 12 months from last contact, if no booking follows |
| Managing your booking and stay | Identification details, contact details, payment data handled by the payment provider | Art. 6(1)(b) — performance of the contract | For the duration of the relationship |
| Reporting guests to the public security authority | Identity document details of each guest | Art. 6(1)(c) — legal obligation (Art. 109, Italian TULPS) | As required by law |
| Tax, accounting and tourist tax obligations | Identification and tax details, amounts, number of nights | Art. 6(1)(c) — legal obligations | 10 years, as required by Italian tax law |
| Defending our rights in legal proceedings | Whatever the specific case requires | Art. 6(1)(f) — legitimate interest | Until the claim becomes time-barred |
The fields marked as required in the enquiry form are necessary for us to reply; without them we cannot act on your request. We do not profile you and we take no automated decisions about you.
3. Cookies and third-party services
This site sets no tracking cookies and uses no analytics. The typefaces are served from our own servers, so simply visiting the site sends no data to any third party.
Google Maps is loaded only if you press the “Load the map” button. Until then no data — including your IP address — reaches Google. If you do load it, Google LLC processes that data as an independent controller under its own privacy policy; the transfer to the United States relies on the safeguards set out in Chapter V of the GDPR.
4. Who receives your data
Your data may be shared with:
- our email and booking-system providers, acting as processors appointed under Art. 28 GDPR;
- the professional handling our accounting and tax obligations;
- the public security authority and public administrations, where the law requires it;
- banks and payment service providers, to collect payment.
We never publish your data or sell it to third parties for marketing.
5. Your rights
You may at any time exercise the rights set out in Articles 15 to 22 of the GDPR: access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. Just write to info@navonalodge.com — we reply without undue delay and in any case within one month.
If you believe the processing breaches the law, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or with the supervisory authority of your country of residence, or bring proceedings before a court.
6. Changes
We may update this notice. The version in force is always the one published on this page, with the date shown at the top.