PRIVACY POLICY
Last updated: 24/08/2026
1. Data Controller
The Data Controller responsible for the processing of personal data collected through the N-Space website is:
N-Space
Vicolo del Fico, 6 – 00186 Rome (Italy)
Email: info@n-spacerome.net
The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and applicable data protection legislation.
2. Types of Data Processed
2.1 Browsing Data
During normal operation, the computer systems and software procedures used to operate this website may collect certain data whose transmission is implicit in the use of Internet communication protocols.
This may include, by way of example:
- IP address;
- addresses of the requested resources;
- time of the request;
- method used to submit the request to the server;
- server response status code;
- information relating to the browser and operating system;
- other parameters relating to the user’s device and computer environment.
This data is primarily processed to ensure the proper functioning of the website, maintain the security of the infrastructure, and identify any anomalies or abuse.
3. Data Provided Voluntarily by the User
The voluntary sending of messages or requests through any contact tools available on the website entails the collection of the data necessary to respond to the request.
This may include, for example:
- first and last name;
- email address;
- telephone number;
- content of the request;
- any additional information voluntarily provided by the user.
Such data is used exclusively to manage and respond to the request and for any subsequent activities related thereto.
4. Purposes and Legal Bases for Processing
Personal data may be processed for the following purposes:
A. Website Operation and Security
To ensure the proper functioning of the website, prevent fraudulent or abusive activities, perform security checks, and manage the technical infrastructure.
Legal basis: the legitimate interest of the Data Controller pursuant to Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations.
B. Responding to User Requests
To respond to requests voluntarily submitted by users and provide the information requested.
Legal basis: taking steps at the request of the data subject prior to entering into a contract and/or the legitimate interest in responding to requests received.
C. Booking Management
The website does not directly manage bookings through an integrated proprietary booking system.
If the user wishes to make a booking, the website may redirect the user to the external Booking.com platform.
Any processing of personal data carried out as part of the booking process is also governed by Booking.com’s privacy policy and terms and conditions. The Data Controller of this website does not acquire, through the mere presence of the external link, the data entered directly by the user on the booking platform.
D. Management of Cookie and Third-Party Service Preferences
The website uses Complianz to manage users’ preferences regarding cookies and other tracking technologies.
The solution records the user’s choices as necessary to document and apply the preferences expressed.
Legal basis: compliance with applicable legal obligations concerning data protection and cookies.
5. Third-Party Services
The website uses certain external services and links to third-party services.
Google Maps
The website uses Google Maps to provide information concerning the location of the property.
Google Maps content is blocked before consent through the consent management system and is loaded only after the user has given consent to the relevant category.
Google may process information relating to the user’s device and connection in accordance with its own policies and terms.
For further information, please refer to Google’s Privacy Policy.
Google Fonts
The fonts used on the website are hosted locally on the website’s server and, based on the checks performed, are not directly requested from Google’s servers during normal browsing.
Therefore, the website does not use the remote Google Fonts service to deliver fonts.
The website may display content from the property’s Instagram profile using Smash Balloon Instagram Feed.
The integration is configured to respect the preferences expressed by the user through the consent management system.
Instagram/Meta content and services are subject to Meta’s own terms and privacy policies.
The website may contain links allowing users to contact the property via WhatsApp.
The mere presence of a link to WhatsApp does not necessarily result in a WhatsApp session being initiated on the website. When the user selects the link, they are redirected to the WhatsApp service.
Any processing carried out by WhatsApp after the service has been accessed is governed by Meta’s/WhatsApp’s applicable privacy policy.
Booking.com
The website contains links to the Booking.com platform, through which bookings may be made.
The website does not directly process data entered by the user into Booking.com’s external booking system.
Once the user accesses Booking.com, the processing of personal data is governed by Booking.com’s applicable privacy policy and terms and conditions.
6. Hosting
The website is hosted by Aruba S.p.A.
The hosting infrastructure may involve the processing of technical and browsing data necessary to provide, secure and maintain the service.
For further information concerning Aruba’s privacy and GDPR practices, please refer to its website.
7. WordPress, Elementor and Polylang
The website is built using WordPress, Elementor and Polylang.
These tools may process technical data necessary for the operation of the website, the management of pages, preferences and language versions.
Cookies and technologies used exclusively for the technical operation of the website are described in the Cookie Policy.
8. Complianz
The website uses Complianz Privacy Suite for WordPress to manage consent relating to cookies and other tracking technologies.
Complianz records the preferences expressed by users and, where necessary, prevents third-party services from being loaded until the relevant consent has been provided.
The service used by the website is not employed for advertising purposes.
For further information:
9. Data Retention
Personal data is retained for the period necessary to fulfil the purposes for which it was collected and, thereafter, for any additional period required to comply with legal obligations or protect the rights of the Data Controller.
Data relating to contact requests is retained for the period necessary to handle the request and any subsequent relationship, as well as for any period required by applicable law.
Technical data and logs may be retained for the period necessary to ensure the security, operation and maintenance of the systems.
For cookies and tracking technologies, please refer to the Cookie Policy and the information provided for each individual technology.
10. Recipients of Personal Data
Personal data may be processed, within the scope of their respective responsibilities, by:
- providers of hosting and technical services;
- IT service providers;
- website maintenance providers;
- providers of the services described in this Privacy Policy, where necessary;
- professionals and consultants appointed by the Data Controller, where necessary.
Personal data is not sold to third parties and is not used by the Data Controller for advertising purposes.
11. Transfers of Data Outside the EEA
Some third-party services used by the website may involve the processing of personal data outside the European Economic Area (EEA).
Where applicable, such transfers will be carried out in accordance with the requirements of Chapter V GDPR.
For specific information concerning transfers carried out by individual providers, users are referred to the relevant privacy policies.
12. Data Subject Rights
Data subjects may exercise, where applicable, the rights provided for under Articles 15–22 GDPR, including:
- obtaining confirmation as to whether or not personal data concerning them is being processed;
- obtaining access to their personal data;
- requesting the rectification of inaccurate data;
- requesting the erasure of personal data, where applicable;
- requesting restriction of processing;
- objecting to processing where provided for by law;
- receiving their personal data in a structured, commonly used and machine-readable format, where applicable;
- withdrawing consent previously given, without affecting the lawfulness of processing carried out before withdrawal.
Requests may be submitted to the Data Controller using the contact details provided in this Privacy Policy.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if they believe that the processing of their personal data infringes applicable data protection legislation.
13. Changes to this Privacy Policy
The Data Controller reserves the right to amend or update this Privacy Policy at any time.
The updated version will be published on this page together with the relevant update date.