DOWNTOWN Smart RoomsHome

Privacy Policy

Last updated: 4 November 2026.

This policy explains how Downtown Ferrara processes personal data when you visit this website, contact us, use Ask AI, or follow the link to the external booking service.

Controller

Downtown Ferrara di Po Marco, a sole proprietorship, VAT number 04095800365, Via Antonio Frizzi 11, 44121 Ferrara (FE), Italy. For privacy requests, email info@downtownferrara.com. No data protection officer has been appointed.

What we process and why

Activity Data and purpose Legal basis Retention
Website delivery and security Technical request data, including IP address and browser information, to deliver and protect the website. Cloudflare may process operational records under its service terms. Our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)). We do not maintain a separate visitor database. Technical records held by Cloudflare follow its service retention and security rules.
Cookie choice Your preference, its date, a consent identifier and language, to apply your choice. Our legal obligation to respect your cookie choice (Art. 6(1)(c)) and our legitimate interest in recording it (Art. 6(1)(f)). The preference cookie lasts 182 days unless you delete it or a new choice replaces it.
Ask AI Your question, up to five previous messages in the open page, language and the generated answer, to respond to your request. Turnstile may process technical data to prevent abuse. Steps requested by you before a possible booking (Art. 6(1)(b)) or, for general questions, our legitimate interest in answering visitors (Art. 6(1)(f)). We do not store conversation text in our database or browser storage. It remains in the memory of the open page and disappears when the page is closed, changed or reloaded. The temporary anti-bot credential can remain in the browser tab for up to two hours; the question counter remains for that tab session.
Contact requests and customer communications The details you provide, including name, email, phone number and message, to deliver and answer your request. The contact form uses Brevo when configured; direct email requests reach our mailbox. Steps requested by you before a booking (Art. 6(1)(b)); otherwise our legitimate interest in replying and maintaining customer correspondence (Art. 6(1)(f)). We retain requests and correspondence for 24 months after the last communication, unless a longer period is required by law or needed to establish, exercise or defend a legal claim. Brevo retains transactional delivery logs according to the account retention rule; without a rule, Brevo states that logs are not automatically deleted. See Brevo's retention information.
Booking link Dates, guest count and language entered in the booking search are passed to the external Direct Book website when you choose to continue. Steps requested by you before booking (Art. 6(1)(b)). We do not store the booking search in this website. Data entered on the external service is handled under that service's privacy information.
Optional analytics Google Analytics 4 processes browsing events and uses analytics cookies only after you accept analytics. Your consent (Art. 6(1)(a)); you may withdraw it at any time using Cookie preferences in the footer. Google Analytics standard properties offer retention settings of 2 or 14 months for user-level and event-level data. User identifiers may be renewed on new activity depending on the property setting; aggregated standard reports can remain available longer. See the Cookie Policy for cookie lifetime.

Please do not enter payment details, identity documents, health information or other sensitive information in free-text fields or Ask AI. If you send such information, contact us to request its removal where applicable.

We do not currently send newsletters or promotional messages through this website. Contacting us does not subscribe you to marketing. We would give you separate information and a choice before introducing such messages.

Ask AI and automated responses

Ask AI is an automated assistant and may make mistakes. When you submit a question, the website sends the question and up to five earlier messages to a Cloudflare function, which uses Cloudflare Workers AI to generate and check a reply. Typing a draft does not send it to Workers AI. We do not use the assistant to make decisions about bookings, payments or other matters with similarly significant effects. Cloudflare states that standard inference inputs and outputs are not retained after the response is delivered, subject to its stated operational, safety and legal exceptions, and are not used to train its models.

Service providers and external websites

These providers may use subprocessors. We share only the data needed for each service.

International transfers

Cloudflare and Google operate internationally, so personal data may be processed outside the European Economic Area. Their published terms describe applicable safeguards, including adequacy arrangements and standard contractual clauses where needed: Cloudflare DPA and Google transfer information. Brevo states that its databases are hosted in the EU; this statement alone does not exclude international access or subprocessors. When you leave this website for Direct Book or another external service, consult that service's privacy information for its transfers.

Your choices and rights

You may browse without using Ask AI, the contact form or the booking service. If you choose one of these functions, the data needed to respond or continue is required for that function. Analytics is optional and remains off until you consent.

Where the GDPR applies, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. To exercise your rights, email info@downtownferrara.com. You may also complain to the Italian Data Protection Authority.

For cookies and browser storage, see our Cookie Policy. We will update this page if our processing changes.