Purpose
Explains data categories, purposes, legal bases, retention, security, rights, and the separation of optional consents.
Public blank document
This template contains no personal data or signatures. Choose a language and download the PDF directly.
Subject and use
To the processing needed for the applicable relationship. Marketing, named public profiles, and image use require separate optional choices.
The public blank explains the framework; actual data and consent records exist only in the protected area.
FAQ
Frequently asked questions
What personal data does the Company collect about me?
The Company collects only data connected to a specific purpose: identity and contact data, contract and tax data, stay and public-security data, application/community information, payment data where needed, and optional marketing/public-profile/image data only with separate consent.
Do you keep copies or photos of my ID card or passport?
No, not as a permanent archive. Where the law requires identity verification or Alloggiati Web transmission, the Company may inspect the document and collect the required fields, but any image used for data entry must be deleted once the legal communication and receipt are completed.
How long will you keep my data?
Retention depends on the data category. Alloggiati receipts are kept for five years, contracts/accounting records normally up to ten years, optional marketing or public-profile data until consent withdrawal or review, and temporary high-risk document staging only for the shortest necessary time.
Is my data stored securely?
The Company must use segregated private storage, encryption, role-based access, strong authentication, access logs, deletion procedures, and processor agreements where suppliers process data. ID images must not be stored in Git repositories, public folders, or unmanaged chats.
What does 'Transparency/Public Profile' mean for my privacy?
It is optional. If you consent, limited professional/community information such as name, role, skills, biography, portfolio, or achievements may be published. It never includes ID documents, private contact details, financial data, health data, detailed stay data, or room assignments.
Can I revoke my consent for photos, videos, marketing, or public profile?
Yes. Optional consents may be withdrawn by written notice to the Company's PEC address. The Company must stop new uses and remove content from channels it controls where reasonably possible, without affecting lawful uses made before withdrawal.
Does the Company sell my data to third parties?
No. The sale of personal data to third parties is forbidden. Suppliers may process data only as authorised processors for the Company's purposes and under appropriate GDPR safeguards.
Why might you need visa or financial documents?
Only if you request visa or administrative support and only to the extent required by that procedure. These files are high-risk temporary files and must be deleted shortly after the case closes unless a legal obligation, dispute, or motivated request requires retention.
How can I correct, access, or delete my personal information?
You may request access, rectification, erasure, restriction, portability where applicable, objection, or consent withdrawal by contacting the Company's PEC address. Erasure may be limited where the Company must retain data for legal obligations or legal defence.
Do you monitor my energy or resource consumption?
Only where necessary for technical management, safety, maintenance, efficiency, or proportionate cost allocation. The Company must prefer aggregated data by room, period, or system and must not publish named consumption profiles.