Privacy

Data controller

Oselia srl, Foro Buonaparte 59, 20121 Milano. For any question about your data you can write to info@oselia.it.

Browsing the website

To show you the pages, the server receives the technical data that every browser sends, such as the IP address, the requested page and the type of browser. We use it only to deliver the pages and to protect the website from abuse, for example by limiting repeated attempts to submit the form. The website’s traffic passes through Cloudflare, which routes it and protects it from attacks: to do so, it also processes the technical data of the connection.

For this check, the IP address is turned into an unreadable code and kept in memory for no more than ten minutes. The website does not record visits and does not use statistics, advertising or profiling tools. The legal basis is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

Requests via the contact form or by email

When you write to us, we process:

• name;
• email address;
• hotel name;
• the text of the message and the information you decide to include.

We use this data to answer your request, present Oselia to you and, if you ask, prepare a proposal. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying to those who contact us (Art. 6(1)(f) GDPR).

The form forwards the request by email to Oselia’s mailbox: the website does not store it. Name, email and hotel are needed to reply to you. We do not use this data for newsletters and we do not pass it on to third parties.

How long we keep the data

We keep requests for as long as necessary to handle them. If no business relationship arises, we delete them within 24 months of the last contact, unless the law requires otherwise.

Who can process the data

The data is accessible only to the people at Oselia who handle requests and to the providers that allow us to run the website and email: Hetzner Online GmbH (servers in Germany), Cloudflare, Inc. (traffic routing and protection) and Zoho Corporation B.V. (email), appointed as data processors (Art. 28 GDPR). The website and email are located in the European Union; Cloudflare may also process the technical data of the connection outside the European Union, with the safeguards provided for by the GDPR.

Your rights

At any time you can ask to:

• know whether we process your data and receive a copy of it;
• correct or complete it;
• delete it;
• restrict its processing;
• receive it in a format readable by another system;
• object to processing based on our legitimate interest.

To do so, write to info@oselia.it (Arts. 15–22 GDPR). If you believe the processing is not correct, you can lodge a complaint with the Garante per la protezione dei dati personali.

Security

The website uses an encrypted connection. The contact form checks where requests come from and limits repeated attempts. We do not take decisions based solely on automated processing.

Cookies

The website does not use cookies. The details are on the dedicated page.

Updates

If the way we process data changes, we update this page. Last updated: 16 September 2026.