Pursuant to and for the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), and Legislative Decree No. 196 of 30 June 2003 containing the "Personal Data Protection Code" (as subsequently amended and supplemented, hereinafter "Privacy Code"), AC21 Apartments, as the data controller, informs data subjects (specifically, guests and potential guests) about the methods, purposes, and legal bases for the processing of personal data acquired in connection with bookings, stays, and related activities at the extra-hotel accommodation facility located in Rome. This document, drafted in compliance with the principles of transparency, fairness, and accountability under Article 5 of the GDPR, aims to provide a comprehensive and concise notice on the processing of personal data, taking into account the specificities of hospitality and tourism activities, while ensuring fulfillment of the controller's regulatory obligations. The personal data of data subjects are processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, as well as accountability, as expressly provided for in Article 5 of the GDPR