Privacy Policy
Last updated 31.03.2026
This Privacy Policy explains how Maison Matilda collects, uses, stores and protects personal data in connection with reservations, accommodation services, restaurant services, website use, marketing and other services offered by the property.
This policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.
1. Data Controller
The Data Controller is:
B&B di Viviana Fernandez
Trading as: Maison Matilda
Registered address: Via Jacopo Riccati 44, Treviso TV 31100
VAT / Tax ID: IT05056260267 / FRNVVN75R61Z514W
Email: info@maisonmatilda.it
Telephone: +393480303369
The accommodation activity and restaurant services offered by Maison Matilda are operated by the same legal entity.
For any questions regarding the processing of personal data, guests may contact the Data Controller using the details above.
2. Personal Data We Collect
Maison Matilda may collect the following categories of personal data:
· Name and surname
· Date and place of birth
· Nationality
· Residential address
· Email address
· Telephone number
· Identity document and passport information
· Tax information where required
· Booking and stay information
· Arrival and departure dates
· Room preferences and special requests
· Restaurant reservations and service information
· Payment and billing information
· Information regarding additional services requested
· Communications exchanged with Maison Matilda
· WhatsApp communications
· Marketing preferences and consent information
· Information regarding allergies, dietary requirements or accessibility needs where voluntarily provided
· Vehicle information where parking is requested
· CCTV footage in common areas
· IP address, browser information, device information and website usage data
· Information collected through cookies and advertising technologies
Maison Matilda only collects information that is reasonably necessary for the purposes described in this Privacy Policy.
3. Reservations and Accommodation Services
Maison Matilda uses Mews as its property management, booking engine and channel management system.
Personal data may be processed through Mews in order to:
· Receive and manage reservations
· Process direct bookings
· Manage availability and distribution
· Confirm, modify or cancel bookings
· Manage check-in and check-out
· Provide accommodation and related services
· Manage guest profiles and stay information
· Manage room charges and additional services
· Process or facilitate payments
· Manage restaurant, minibar, breakfast, room service, parking and other services
The legal basis for this processing is the performance of a contract or steps taken at the guest’s request before entering into a contract.
Mews may process personal data on behalf of Maison Matilda in accordance with its contractual and data protection obligations.
4. Restaurant and Food & Beverage Services
Restaurant services are operated by the same legal entity as Maison Matilda.
Personal data may be processed for purposes including:
· Managing restaurant reservations
· Managing room charges and restaurant bills
· Responding to dietary requirements and special requests
· Managing guest communications
· Processing payments
· Handling complaints or service requests
Where dietary, allergy or health-related information is voluntarily provided, such information will only be processed where necessary to provide the requested service and where legally permitted.
5. Legal Obligations
Certain personal information must be processed in order to comply with legal obligations applicable to accommodation and hospitality providers in Italy.
This may include:
· Guest identification and registration requirements
· Communication of guest information to competent public authorities
· Tax and accounting obligations
· Tourist tax requirements
· Issuing invoices and receipts
· Other obligations imposed by Italian law
The legal basis is compliance with a legal obligation.
6. Payments
Payment information may be processed in order to collect accommodation charges, restaurant charges and additional services.
Payment transactions may be processed through Mews and/or third-party payment providers, financial institutions or payment gateways.
Maison Matilda does not necessarily store complete payment card information where payment processing is handled by an authorised third-party provider.
7. WhatsApp Communications
Maison Matilda may communicate with guests through WhatsApp for purposes including:
· Reservation enquiries
· Pre-arrival information
· Check-in instructions
· Guest requests
· Restaurant or service reservations
· Assistance during the stay
· Post-stay communications where appropriate
When guests communicate with Maison Matilda through WhatsApp, information such as their telephone number, profile information and message content may also be processed by WhatsApp and its affiliated companies according to their own privacy terms.
Guests may choose to contact Maison Matilda through alternative communication methods, such as email or telephone, where available.
The legal basis for these communications is generally the performance of a contract, pre-contractual measures or Maison Matilda’s legitimate interest in providing customer service.
8. Promotional Emails and Direct Marketing
Maison Matilda may send promotional communications concerning:
· Special offers
· Accommodation promotions
· Restaurant offers
· Events
· New services
· Seasonal promotions
· News relating to Maison Matilda
Where required by law, promotional emails will only be sent where the recipient has provided valid consent.
Recipients may withdraw consent or unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting Maison Matilda.
Withdrawal of marketing consent does not affect the processing of personal data required to manage an existing reservation or comply with legal obligations.
9. Website Analytics and Advertising
Maison Matilda uses digital analytics and advertising technologies including:
· Google Analytics
· Google Ads
· Meta technologies, which may include Meta Pixel and related advertising tools
These technologies may collect information including:
· IP address
· Device and browser information
· Pages visited
· Time spent on the website
· Interactions with website content
· Referral source
· Advertising interactions
· Conversion information
This information may be used to:
· Understand how visitors use the website
· Improve website performance
· Measure advertising campaigns
· Analyse reservations and conversions
· Deliver or measure personalised advertising
· Build advertising audiences where permitted
Where required under applicable law, analytics and advertising technologies that are not strictly necessary will only be activated after the website visitor has provided consent through the cookie consent system.
Users may withdraw or modify their cookie consent at any time through the website’s cookie settings.
Further information is provided in Maison Matilda’s separate Cookie Policy.
10. Cookies
The Maison Matilda website may use cookies and similar technologies for:
· Essential website functionality
· Booking functionality
· Website security
· Analytics
· Performance measurement
· Advertising and conversion tracking
· Marketing and audience measurement
Strictly necessary cookies may operate without consent where permitted by law.
Analytics, advertising and profiling cookies will be used only according to the consent requirements applicable under Italian and European law.
11. CCTV
Maison Matilda uses CCTV cameras in common areas of the property for security and safety purposes.
CCTV may be used to:
· Protect guests and staff
· Protect property
· Prevent and investigate theft or damage
· Prevent unauthorised access
· Support the investigation of security incidents
CCTV is not intended to monitor private guest areas such as bedrooms or bathrooms.
Appropriate notices will be displayed in areas subject to video surveillance.
Recordings will only be accessed by authorised persons and may be disclosed to law enforcement authorities or other competent authorities where legally required.
CCTV footage will be retained only for the period necessary for security purposes and in accordance with applicable Italian data protection requirements, unless longer retention is required in connection with an incident, investigation or legal claim.
12. Special Categories of Personal Data
Guests may voluntarily provide information relating to:
· Health conditions
· Allergies
· Dietary requirements
· Disabilities
· Accessibility needs
Such information will only be processed where necessary to provide the requested service and where permitted under applicable law.
Guests should avoid providing sensitive personal information unless it is relevant to the service requested.
13. Identity Documents and Guest Registration
Italian accommodation providers may be legally required to collect identification information relating to guests and communicate certain information to competent public authorities.
Maison Matilda processes such information where required or permitted by applicable law.
14. How We Collect Personal Data
Personal data may be collected:
· Directly from the guest
· Through the Maison Matilda website
· Through Mews
· Through online travel agencies
· Through travel agencies or corporate clients
· By telephone
· By email
· Through WhatsApp
· Through restaurant reservations
· Through payment providers
· Through cookies and advertising technologies
· During check-in
· During the guest’s stay
· Through CCTV in common areas
Where a reservation is made through a third-party platform, that platform may independently process personal data according to its own privacy policy.
15. Sharing Personal Data
Where necessary, Maison Matilda may share personal data with:
· Mews, for property management, reservations, booking engine and channel management
· Online travel agencies and booking partners
· Payment processors and banks
· Accountants and tax advisers
· IT and website service providers
· Email and marketing service providers
· Google, in connection with Google Analytics and Google Ads
· Meta, in connection with advertising, analytics and marketing technologies
· WhatsApp / Meta, where guests communicate through WhatsApp
· Cleaning, maintenance or operational providers where necessary
· Professional advisers
· Insurers
· Public authorities where legally required
· Law enforcement authorities where legally required or necessary for security purposes
Third-party providers may process personal data as processors, independent controllers or joint controllers depending on the service and applicable legal arrangement.
16. International Data Transfers
Some technology, advertising, booking, payment or communication providers may process personal data outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, Maison Matilda will rely on appropriate legal mechanisms required under GDPR, which may include:
· An adequacy decision adopted by the European Commission
· Standard Contractual Clauses
· Other legally recognised safeguards
This may apply, in particular, to certain services provided by Google, Meta, WhatsApp or other international technology providers.
17. Data Retention
Maison Matilda retains personal data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations.
In particular:
· Reservation and stay data will be retained for the period necessary to administer the stay and related legal obligations.
· Tax and accounting information will be retained for the period required under Italian law.
· Guest identification information will be managed in accordance with applicable guest registration requirements.
· Marketing information will be retained until consent is withdrawn or for the period otherwise permitted by applicable law.
· CCTV recordings will normally be retained only for a limited period necessary for security purposes unless an incident requires longer retention.
· Communications may be retained where necessary for customer service, contractual administration or legal claims.
· Data connected with disputes or legal claims may be retained until the relevant limitation period has expired.
When data is no longer required, it will be deleted or anonymised where appropriate.
18. Security
Maison Matilda implements appropriate technical and organisational measures to protect personal data from:
· Unauthorised access
· Accidental loss
· Destruction
· Alteration
· Unauthorised disclosure
· Unlawful processing
Access to personal information is limited to persons who reasonably require it for operational or legal purposes.
19. Guest Rights
Under GDPR, individuals may have the right to:
· Request access to their personal data
· Request correction of inaccurate or incomplete data
· Request deletion of personal data where legally permitted
· Request restriction of processing
· Object to certain processing
· Request data portability
· Withdraw consent at any time where processing is based on consent
· Object to direct marketing at any time
· Lodge a complaint with a supervisory authority
These rights may be subject to legal limitations where Maison Matilda is required to retain or process certain information.
Requests may be sent to:
Maison Matilda may request appropriate identification before responding to a data protection request.
20. Right to Lodge a Complaint
Individuals have the right to lodge a complaint with the competent supervisory authority.
In Italy, the supervisory authority is the:
Garante per la Protezione dei Dati Personali
21. Third-Party Websites and Services
The Maison Matilda website may contain links to external booking platforms, social media platforms, maps or other third-party services.
These third parties may independently process personal information according to their own privacy policies.
Maison Matilda is not responsible for the privacy practices of independent third parties.
22. Minors
Personal data relating to minors may be processed where necessary to manage accommodation, restaurant services and applicable legal requirements.
Where appropriate, information relating to minors should be provided by a parent, guardian or other legally responsible adult.
23. Automated Decision-Making
Maison Matilda does not generally make decisions producing legal or similarly significant effects solely through automated processing.
Analytics, advertising and booking technologies may use automated processes for purposes such as measurement, audience creation, advertising optimisation or pricing support, but these do not generally constitute automated decision-making producing legal or similarly significant effects on the individual.
24. Changes to This Privacy Policy
Maison Matilda may update this Privacy Policy where necessary to reflect changes in:
· Legal requirements
· Technology
· Service providers
· Website functionality
· Marketing activities
· Business operations
The latest version will be published on the Maison Matilda website together with the date of the most recent update.