PRIVACY POLICY

Last updated: 23 September 2026

This Privacy Policy describes how personal data is processed when users visit the Siham Lake Home website or contact the property owner for information, accommodation requests or bookings.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (“GDPR”), applicable Italian data protection legislation and the regulations applicable to accommodation facilities and tourist rentals.

1. DATA CONTROLLER

The Data Controller is:

Siham Tellouki
Owner of Siham Lake Home
Via Nazionale 78
23020 Verceia (SO)
Lombardy – Italy

Email: flysiham@gmail.com
Phone: +39 339 419 4608

Tax Code (Codice Fiscale): TLLSHM86D58Z330M

CIN: IT014075C2P39E5BDX
CIR: 014075-LNI-00012

The information above is contained in the Certificate of Issuance of the National Identification Code (CIN) associated with the property.

2. PERSONAL DATA THAT MAY BE PROCESSED

Through the website and in connection with enquiries and stays, the following categories of personal data may be processed, depending on the service used.

Identification and contact data

• first and last name;
• email address;
• telephone number;
• any information voluntarily provided by the user in a message or enquiry.

Stay enquiry data

When a user requests information or expresses an intention to stay at Siham Lake Home, the following may be processed:

• requested stay dates;
• number of guests;
• information necessary to manage the enquiry;
• communications exchanged with the Data Controller.

Guest data

In connection with a stay, the personal data necessary to identify guests and comply with applicable Italian legislation concerning accommodation and tourist rentals may be processed.

Such data may include the personal details and identification information required by applicable law.

Guest details may be communicated to the competent Police authorities through the Alloggiati Web system, in accordance with the procedures and deadlines established by law.

Technical browsing data

The operation of the website may involve the automatic collection of certain technical information, including:

• IP address;
• browser type;
• operating system;
• device used;
• date and time of the visit;
• pages visited;
• technical information necessary for website security and proper operation.

Such information is processed only to the extent necessary for the operation, security and maintenance of the website.

3. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes.

A. Responding to user enquiries

To respond to requests for information concerning Siham Lake Home, the property, availability, stay arrangements or other services requested by the user.

Legal basis: performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) GDPR.

B. Managing a booking request or stay

To manage booking enquiries, communication with guests, the organisation of the stay and any resulting contractual relationship.

Legal basis: performance of a contract or pre-contractual measures requested by the data subject, Article 6(1)(b) GDPR.

C. Compliance with legal obligations

Personal data may be processed where necessary to comply with obligations imposed by Italian law, including obligations concerning the registration and communication of guest information to the competent authorities.

For short-term rentals and accommodation facilities, guest details may be communicated to the competent Police authorities through the Alloggiati Web system.

Legal basis: compliance with a legal obligation to which the Data Controller is subject, Article 6(1)(c) GDPR.

D. Website security and prevention of abuse

Technical data may be processed in order to:

• ensure website security;
• prevent unauthorised access;
• prevent fraudulent or abusive activities;
• identify technical malfunctions;
• protect the rights of the Data Controller.

Legal basis: legitimate interest of the Data Controller, Article 6(1)(f) GDPR, within the limits permitted by applicable law.

E. Establishment, exercise or defence of legal claims

Personal data may be retained and processed where necessary for the establishment, exercise or defence of the Data Controller's legal rights, whether in judicial or extrajudicial proceedings.

Legal basis: legitimate interest and, where applicable, the necessity to exercise or defend legal rights.

F. Promotional communications

If the website subsequently provides newsletters, promotional communications or marketing activities requiring consent, such activities will be carried out only with the user's consent, where required by applicable law.

Refusing consent will not prevent the user from requesting information or booking a stay.

4. MANDATORY OR OPTIONAL NATURE OF PROVIDING DATA

The provision of personal data may be:

necessary, where the data is required to respond to an enquiry, manage a booking, comply with legal obligations or provide the accommodation service;

or

optional, where the data is not necessary for the specific purpose requested by the user.

If the necessary data is not provided, it may not be possible to respond to the enquiry, establish or manage the contractual relationship, or comply with applicable legal obligations.

5. PROCESSING METHODS

Personal data is processed using paper, electronic and digital systems, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and confidentiality.

Data may be processed only by authorised persons or by service providers acting as data processors, where applicable.

Appropriate technical and organisational measures are adopted to protect personal data against loss, unlawful use, unauthorised access, disclosure or alteration.

6. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed, to the extent necessary for the relevant purposes, to:

• technical providers managing the website;
• IT and hosting service providers;
• email service providers;
• providers used for booking management, where applicable;
• professional advisers, where necessary;
• public and administrative authorities where required by law;
• the Police and public security authorities in connection with legal obligations concerning guests.

Personal data will not be publicly disclosed.

Data will only be communicated to third parties where necessary for the purposes described in this Privacy Policy or where required by law.

7. ALLOGGIATI WEB AND GUEST DATA

For the management of stays, Siham Lake Home may be required to collect and communicate guest identification details to the competent authorities in accordance with applicable Italian legislation.

The Alloggiati Web system operated by the Italian State Police provides for the transmission of guest details to the competent local Police authority.

For ordinary stays, guest information must be transmitted within the deadlines established by law. Specific shorter deadlines apply to stays of less than 24 hours.

The processing carried out for this purpose is not based on the guest's consent, but on compliance with legal obligations.

8. DATA RETENTION

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.

In particular:

• data relating to enquiries will be retained for the time necessary to manage the enquiry and, subsequently, for the period reasonably necessary to protect the Data Controller's rights;
• data relating to bookings and contractual relationships will be retained for the period necessary to manage the relationship and for any additional periods required by applicable law;
• data processed to comply with legal obligations will be retained for the period established by the relevant legislation;
• technical and security data will be retained for the period necessary for the relevant purposes and in accordance with the technical policies of the services used.

At the end of the applicable retention periods, the data will be deleted or anonymised, unless further retention is necessary to comply with a legal obligation or to exercise or defend legal rights.

9. COOKIES AND OTHER TRACKING TECHNOLOGIES

The website may use cookies and technical tools necessary for its proper operation.

Necessary technical cookies may be used without the user's consent, while providing appropriate information about their use.

Any non-essential cookies or tracking technologies, including those used for certain statistical, analytical, advertising or profiling purposes, will be used in accordance with applicable legislation and, where required, only with the user's prior consent.

Users must be able to modify or withdraw their cookie preferences through the mechanisms made available by the website.

10. INTERNATIONAL DATA TRANSFERS

The Data Controller does not intentionally transfer personal data outside the European Economic Area, except where this may be necessary due to the use of specific technology services provided by third parties.

Where a service provider involves the transfer of data to a third country, such transfer will be carried out in accordance with the GDPR and the applicable safeguards.

Where necessary, the safeguards provided for under Articles 44 et seq. of the GDPR will be adopted.

11. DATA SUBJECT RIGHTS

Where provided for by applicable legislation, data subjects may exercise the following rights:

• obtain confirmation as to whether or not personal data concerning them is being processed;
• obtain access to their personal data;
• obtain the rectification of inaccurate data;
• request the erasure of their data where applicable;
• request restriction of processing;
• object to processing where applicable;
• obtain data portability where applicable;
• withdraw previously given consent where processing is based on consent.

The GDPR expressly provides, among others, for rights of access, erasure, restriction, portability and objection.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

12. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights, you may contact:

Siham Tellouki
Siham Lake Home
Via Nazionale 78
23020 Verceia (SO) – Italy

Email: flysiham@gmail.com

The request should contain sufficient information to allow the Data Controller to identify the data subject and properly process the request.

The Data Controller will respond within the time limits established by applicable law.

13. RIGHT TO LODGE A COMPLAINT

If a data subject believes that their personal data is being processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

For Italy, the competent supervisory authority is:

Garante per la protezione dei dati personali
Italian Data Protection Authority.

14. CHILDREN

The website is not specifically directed at children.

The Data Controller does not knowingly collect personal data from children through the website for purposes that are not necessary.

Where information relating to minors is necessary for the management of a stay, such data will be processed only to the extent permitted by applicable law and for purposes connected with the accommodation service and legal obligations.

15. LINKS TO THIRD-PARTY WEBSITES

The website may contain links to websites or services operated by third parties.

Siham Lake Home is not responsible for the way in which such third parties process personal data.

Users are advised to consult the privacy policies of those websites before providing personal data.

16. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated to reflect changes in legislation, technology or organisational arrangements, or changes to the services used by the website.

The latest version will be published on this page together with the date of the most recent update.

PROPERTY IDENTIFICATION DETAILS

Siham Lake Home
Via Nazionale 78
23020 Verceia (SO)
Lombardy, Italy

CIN: IT014075C2P39E5BDX
CIR: 014075-LNI-00012
Email: flysiham@gmail.com
Phone: +39 339 419 4608

The official documentation identifies the property as “Alloggi privati in affitto in forma non imprenditoriale”, with 4 beds and 2 rooms.