Privacy Policy
Information on the processing of personal data pursuant to Article 13 of EU Regulation 2016/679 (GDPR).
Last updated: 5 May 2026
1. Data Controller
The Controller of personal data collected through the website tychotel.it(the "Site") and through the services provided by the hotel is Safian Group S.R.L., registered office at Viale XXIII Settembre 1845, 109 - 47921 Rimini (RN), VAT ID 04852710401(the "Controller").
For any privacy-related request you can contact us at privacy@tychotel.it or at our operational address Viale San Salvador, 160 - 47922 Torre Pedrera, Rimini (RN).
2. Categories of data processed
When browsing the Site and using our services, the following personal data may be collected:
- Browsing data automatically acquired by the IT systems (IP address, browser type, operating system, pages visited, request time);
- Data voluntarily provided through the contact form (first name, last name, email, phone, optional stay dates and message);
- Data shared with the Otello chatbot integrated in the Site to provide user assistance;
- Booking engine data (Passepartout) if a reservation is started (name, contact details, stay dates, payment data managed by the relevant external processor);
- Cookie consent preferences stored in your browser to remember your choices.
3. Purposes and legal basis
a) Providing the requested services
Your data is processed to reply to enquiries, manage reservations and provide ancillary services.
Legal basis: contractual and pre-contractual measures (Art. 6.1.b GDPR).
b) Legal obligations
Communication of guest data to the Italian Police for public safety purposes (Art. 109 TULPS), electronic invoicing, tax and accounting compliance.
Legal basis: legal obligation (Art. 6.1.c GDPR).
c) Site functionality, security and assistance chat
Ensuring correct operation of the Site, security, storage of your preferences (including cookie choices) and the customer-service chat widget (Otello) embedded to let you interact with the hotel.
Legal basis: legitimate interest of the Controller and pre-contractual measures upon user request (Arts. 6.1.f and 6.1.b GDPR).
d) Marketing and profiling (possible future activations)
Any analytical or profiling cookies to measure campaign effectiveness and send promotional communications. Not currently in use.
Legal basis: consent, freely revocable (Art. 6.1.a GDPR).
4. Recipients of the data
Data may be processed by authorised personnel of the Controller and by external parties appointed as Data Processors (Art. 28 GDPR), including:
- IT service providers, hosting and website maintenance;
- Passepartout S.p.A. for the booking engine;
- The Otello chatbot provider for online assistance;
- Banks and electronic payment providers for financial transactions;
- Accountants, legal advisors and public authorities where required by law.
Data is not disclosed to the public and is not sold to third parties for commercial purposes without your explicit consent.
5. Transfers outside the EU
Some providers (for example the hosting of the chatbot script on Google Cloud Storage) may involve data transfers to non-EU countries. Such transfers only take place to countries covered by an adequacy decision of the European Commission or on the basis of the Standard Contractual Clauses (Art. 46 GDPR).
6. Retention period
Data will be kept only as long as necessary for the purposes:
- Contact form data: up to 24 months from the request, unless converted into a booking;
- Booking and stay data: 10 years, as required by Italian tax law;
- Browsing data: up to 6 months for security purposes;
- Cookie preferences: 12 months from the consent collection.
7. Your rights
Pursuant to Articles 15-22 GDPR you are entitled at any time to:
- Access your personal data (Art. 15);
- Request rectification or erasure (Arts. 16-17);
- Restrict the processing (Art. 18);
- Receive your data in a portable format (Art. 20);
- Object to processing based on legitimate interest (Art. 21);
- Withdraw your consent, without affecting the lawfulness of processing prior to the withdrawal.
To exercise these rights you can write to privacy@tychotel.it. We will reply without undue delay and in any case within 30 days.
8. Right to lodge a complaint
If you believe that the processing of your data infringes the GDPR you have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome) or with the supervisory authority of your EU country of habitual residence.
9. Updates to this policy
The Controller reserves the right to update this policy to reflect regulatory or operational changes. The last update date is shown at the top of the page. Please check this page periodically.
For information about the use of cookies please read our Cookie Policy.
Related documents

