Mandatory privacy notice under GDPR art. 13 (and the Codice Privacy D.lgs 196/2003) for any processing of customer personal data — bookings, loyalty, Wi-Fi, and (for hotels) the Alloggiati Web transfer to the Questura; must be published on-site (QR code/counter) and on the website.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone. Field placeholders are shown as labels — on the site the template is read-only, values are entered inside the system.
CUSTOMER PRIVACY NOTICE (INFORMATIVA PRIVACY CLIENTI)
Business name (titolare del trattamento) (P.IVA Business P.IVA), Business address Effective date: Effective date
This notice explains how Business name (titolare del trattamento) (the "titolare del trattamento" / data controller) collects, uses and protects the personal data of its customers, in accordance with Article 13 of the GDPR (Regolamento (UE) 2016/679) and the Codice Privacy (D.lgs 196/2003, as amended by D.lgs 101/2018), under the supervision of the Garante per la Protezione dei Dati Personali.
1. DATA CONTROLLER 1.1. Business name (titolare del trattamento) is the data controller (titolare del trattamento). 1.2. Privacy contact: Privacy contact
2. PURPOSES AND LEGAL BASIS 2.1. Purposes (finalità): Purposes of processing (finalità) 2.2. Legal basis (base giuridica): Legal basis (base giuridica)
3. DATA COLLECTED 3.1. Data collected (dati raccolti)
4. RECIPIENTS 4.1. Recipients (destinatari) 4.2. ⚠️ For hotels/B&Bs: guest data transferred to the Questura via Alloggiati Web is a SEPARATE legal obligation (see the dedicated Alloggiati Web checklist template) — it does not require the guest's consent, but it should be mentioned explicitly here for transparency: Alloggiati Web transfer note (for hotels)
5. RETENTION 5.1. Retention period (conservazione)
6. YOUR RIGHTS 6.1. Data subject rights (diritti dell'interessato) 6.2. Right to lodge a complaint with the Garante
7. PUBLICATION 7.1. This notice must be made available to customers where their data is collected — at the entrance/till (QR code or printed copy) and on the business website.
— — — ⚠️ This is a boilerplate template, not legal advice. Italian employment, food-safety, privacy and consumer-protection law (the applicable CCNL — e.g. CCNL Turismo-Pubblici Esercizi/Ristorazione e Turismo, FIPE-Confcommercio, renewed 05.06.2024, in force until 31.12.2027 — the Statuto dei Lavoratori L. 300/1970, D.lgs 81/2015, the "Decreto Trasparenza" D.lgs 104/2022 as softened by DL 48/2023, D.lgs 81/2008, Regulation (EC) No 852/2004, Regulation (EU) No 1169/2011, the GDPR/Codice Privacy D.lgs 196/2003, the TULPS R.D. 773/1931 and the Codice del Consumo D.lgs 206/2005) is highly procedural, tied to fixed statutory calendars (comunicazione preventiva before every call-up, contestazione disciplinare timing, UNILAV deadlines, Alloggiati Web transmission windows) and changes frequently, with CCNL pay tables and sanction thresholds re-indexed periodically, and with some institutions (e.g. affitto di poltrona/cabina) still governed only by circolari and regional/ municipal rules rather than a single national law. Have this document reviewed and adapted by an Italian employment/legal advisor (avvocato giuslavorista / consulente del lavoro) and verified against the applicable CCNL, regional rules and current thresholds before use.
Fields that belong to a switched-off clause are dimmed — they are not asked for.
e.g. bookings/reservations, orders, loyalty programme, Wi-Fi, marketing opt-ins
Legal obligation, not consent-based — mention it here for transparency
2 of 13 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.