Privacy
Data controller
AGS S.A.S. di Angalò Rocco, which runs Hotel City (Via Madonnina 36, 37057 San Giovanni Lupatoto, VR, Italy). Registered office: Strada Statale 18, Contrada San Fili, 89015 Palmi (RC), Italy. VAT no. IT02372960803. For any question about your data: +39 045 925 1500, info@hotelcityverona.it.
What data we process and why
The website has no private areas and asks for no registration. We only process the data needed for the activities below.
Browsing the website
Like any web server, the server hosting this website records technical data about requests: IP address, date and time, page requested, browser and referring page. This is used only to run the website and protect it from abuse and attacks (legitimate interest, Art. 6(1)(f) GDPR) and is deleted automatically after 7 days.
Contact form
First name, last name, email, phone (optional), dates of stay (optional) and message are used to answer your enquiry and, if you ask, to prepare a quote (pre-contractual steps at your request, Art. 6(1)(b) GDPR). Fields marked with an asterisk are required: without them we cannot reply. The website does not store messages: it forwards them by email to the reception mailbox, where they are kept as long as needed to handle your enquiry and any resulting stay.
To block automated messages (spam), your browser runs a short anonymous check, with no cookies or third-party services; the server keeps an irreversible fingerprint of the IP address for up to 15 minutes to limit repeated submissions. The “I’m not a robot” box only starts and confirms this check.
Email, phone and WhatsApp
If you write to us or call us, we use your contact details only to reply. The WhatsApp button opens the WhatsApp app or website: from that moment the privacy notice of WhatsApp Ireland Ltd (Meta group), which processes data as an independent controller, also applies.
Bookings
The “Book direct” form is provided by Simple Booking (Zucchetti Hospitality): to display it, your browser downloads a script from their servers, which therefore receive your IP address. Searches and bookings are completed on their website; booking data reaches the hotel and is processed to perform the accommodation contract (Art. 6(1)(b) GDPR) and to meet legal obligations, such as registering guests with the police and tax requirements (Art. 6(1)(c) GDPR), for the periods required by those rules.
Visit statistics
Only if you consent (Art. 6(1)(a) GDPR) do we measure visits with Matomo, installed on our provider’s servers in Italy, not on third-party services. Matomo is configured without cookies, truncates the IP address by its last two numbers before storing it, respects the browser’s “Do Not Track” setting and shares data with no one. It records pages viewed, device and browser type, referrer and clicks on phone, email, WhatsApp, the contact form and availability searches. Detailed data is deleted after 180 days; only anonymous totals are kept.
Map
The Google Maps map loads only if you request it with the button or have consented to “External content”. At that moment Google (Google Ireland Ltd and Google LLC) receives your IP address and may use its own cookies, under its privacy policy.
Who we share data with
Data is neither published nor sold. Besides authorised hotel staff, it may be processed only by the providers who help us deliver the service, appointed as data processors: 44Bit Srls (website hosting and maintenance, Matomo statistics, servers in Italy), Aruba S.p.A. (email) and the provider of the Simple Booking system. Google and WhatsApp, if you choose to use them, process data as independent controllers.
Transfers outside the European Union
The website, email and statistics stay within the European Union. A transfer to the United States can only happen if you load the Google map or use WhatsApp: in those cases it is based on the EU-US Data Privacy Framework, to which those companies adhere.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR), by writing to info@hotelcityverona.it. Consent to statistics and external content can be withdrawn whenever you like from Cookie preferences, without affecting processing already carried out.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of your country.
Cookies
Which cookies the website uses and how to choose is explained in the cookie policy.
Updates
This notice was last updated on 28 October 2026. Any changes will be published on this page.