Home › Privacy policy
Legal information
How we process the personal data of people who visit the website, contact us and stay in our suites, in accordance with EU Regulation 2016/679 (GDPR) and the Italian Privacy Code.
Last updated: 27 September 2026
Mercadante Suite, Via Saverio Mercadante 10, 20124 Milano (MI), Italy.
Email: mercadantemilan@gmail.com · Phone and WhatsApp: +39 344 515 8213
CIN: IT015146C27S9ROPHE · CIR: 015146-CNI-07538
We have not appointed a Data Protection Officer (DPO), as this is not mandatory for our business. For any privacy questions, please write to us at the email address above.
We do not knowingly collect data from children under 14, except as accompanied guests and only to the extent required by law for check-in.
| Purpose | Legal basis |
|---|---|
| Managing your booking, payment and stay | Performance of a contract (Art. 6(1)(b) GDPR) |
| Registering guests with the police (Questura, Art. 109 of the Italian Consolidated Law on Public Security – TULPS), paying the city tourist tax, meeting tax and statistical obligations | Legal obligation (Art. 6(1)(c)) |
| Answering your enquiries before you book | Pre-contractual measures (Art. 6(1)(b)) |
| Protecting the website from spam, abuse and cyber attacks | Legitimate interest (Art. 6(1)(f)) |
| Measuring website usage in aggregate form (statistics) | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Displaying maps and third-party content | Consent via the cookie banner |
We do not use your data for advertising profiling or for automated decision-making.
Booking data and identity document details are required: without them we cannot confirm your booking or welcome you, because guest registration is mandatory by law. Consent to statistics and third-party cookies, on the other hand, is optional and does not limit your use of the website, except for displaying the map.
Data is processed by us and by providers acting as data processors or as independent controllers for their own services:
We do not sell or transfer your data to third parties for commercial purposes.
Some providers (for example Google and Meta) may process data in the United States. In these cases the transfer takes place on the basis of the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
The website uses an encrypted connection (HTTPS), is protected by anti-spam and security systems and is updated regularly. Access to guest data is limited to the people who manage the suites and to the providers listed above.
At any time you can request access to your data, its rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Arts. 15–22 GDPR). You can withdraw your consent at any time, without affecting processing already carried out.
Write to mercadantemilan@gmail.com: we reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
We use technical cookies and, only with your consent, statistics and third-party cookies. You will find the full list and instructions for changing your choices in the cookie policy.
We may update this policy when the services we use or the law change. The version in force is always the one published on this page, with the date of the last update shown at the top.
