Privacy policy
Data controller: Mida Accommodation S.r.l., Via dei Colli della Farnesina 202, 00135 Roma, VAT IT18000141004, info@midaaccommodation.com. This notice is provided under art. 13 of Regulation (EU) 2016/679 (GDPR). Last updated September 2026.
What we collect and why
Booking data (name, email, phone, country, dates, guests, notes) to manage your reservation and stay: legal basis is the contract. Identity documents of all guests at check-in, transmitted to the State Police portal (Alloggiati Web) and used for tourist-tax reporting to Roma Capitale: legal basis is a legal obligation. Payment data is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. or by your bank; we never see full card numbers. Contact-form messages to answer you: legitimate interest. Anonymous visit counts via Umami (no cookies, no personal data): legitimate interest. Google Analytics 4, only if you accept cookies: consent.
Retention
Booking and invoicing records are kept for 10 years as required by Italian tax law. Police registration records follow the legal terms. Contact messages are kept for 24 months. Analytics data is retained 14 months.
Recipients
Our hosts and cleaning staff, bound by confidentiality; PayPal (Europe) S.à r.l. et Cie, S.C.A. (payments); our email provider (Hostinger); Google Ireland (analytics, with consent); the State Police and Roma Capitale as required by law; our accountant for tax purposes. Data is processed in the EU; where a provider transfers data outside the EU, it does so under Standard Contractual Clauses.
Your rights
You may access, rectify, erase, restrict or port your data, object to processing and withdraw consent at any time by writing to info@midaaccommodation.com. You may lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it).