Privacy policy

1. Who processes the data

The data controller is:

VENUS LAB S.R.L.
Viale Ravenna 3 — 48015 Cervia (RA), Italy
VAT IT02801810397
[email protected] — +39 389 123 3063

We have not appointed a Data Protection Officer (DPO): we do not fall within the cases where Article 37 of the GDPR requires one. For any question about personal data, write to the address above.

2. What data we collect

a) Data you give us through the contact form

Your name, email address and — if you choose to provide them — the name of your property, phone number, number of rooms and the module you are interested in, along with the text of your message. Only name, email and message are required: without those we cannot reply to you.

b) Data you give us when you request the guide

To receive the revenue management guide we ask for your email address, the type of property and, if you want to give it, the number of rooms. They are used to send you the document and to avoid writing to you later about things that do not concern you.

You give your consent by ticking the box on the form, which is mandatory: without it the form does not submit. We then send you an email with a link to open: until you open it you receive neither the guide nor anything else, and if it was not you who asked for it, simply ignore it. For every request we keep the proof of consent — date and time, the page it came from, IP address and browser, and the moment of confirmation — because that is what shows the consent was actually given, and by whom. You can ask to stop receiving anything at any time, from the link at the bottom of each of our emails or by writing to [email protected].

c) Data you give us when you take the PMS check-up

The check-up is a ten-question survey: we do not see your answers until you give us your email, because your browser works out the score locally, as you answer. If you choose to receive the result we ask for your email address, the type of property and — optionally — the number of rooms, and along with those we receive the score, the band and your ten answers.

We keep the answers because they are the substance of the result: without them that number cannot be reread or explained. We do not use them to profile you and we do not pass them to anyone. We send you one email with the result, not a sequence; from then on the same rule applies as to all our email — the unsubscribe link is at the bottom of every one.

d) Where you came from

When you submit one of the forms we also receive, if present, the origin of your visit: the campaign parameters in the address you arrived with (the so-called utm values, and the Google and Meta click identifiers), the site you came from if any, and the first page you saw.

They tell us which content and which ads bring real enquiries, and therefore let us stop paying for the ones that do not. We use no cookies for this: that data sits in the browser's temporary memory (sessionStorage), clears itself when you close the tab, and reaches us only at the moment you submit a form — that is, when you are already giving us data of your own accord. It is also why this site shows you no banner: there is no marketing cookie for you to accept.

e) Browsing data

Like every website, our systems record technical data transmitted by your browser: IP address, browser type and operating system, referring page, pages visited, date and time. This is used to make the site work and to protect it from abuse.

f) Visit statistics

We use Cloudflare Web Analytics, which measures visits without cookies and without persistent identifiers: it does not build a profile, does not follow you from one site to another and does not allow anyone to be identified. That is why the site does not show you a consent banner: there is nothing to consent to.

g) Anti-spam verification

The contact form may be protected by Cloudflare Turnstile, which distinguishes people from automated programs without tracking cookies and without asking you to identify traffic lights. It processes technical session data for the sole purpose of verifying that a submission is genuine.

3. Why we process it, and on what legal basis

Purpose	Legal basis
Answering your enquiry, preparing a quote or a demo for you	Consent and pre-contractual measures (Art. 6(1)(a) and (b))
Sending you the guide you requested and, subsequently, informational communications about our content and services	Consent, withdrawable at any time (Art. 6(1)(a))
Running the site, protecting it from abuse and attack, measuring visits in aggregate form	Legitimate interest (Art. 6(1)(f))
Managing the contractual relationship, if you become a customer	Performance of a contract (Art. 6(1)(b))
Meeting tax, accounting and statutory obligations	Legal obligation (Art. 6(1)(c))

We do not sell your data and we do not pass it to anyone for commercial purposes. The only communications you might receive from us are the ones you signed up for yourself by requesting the guide, and they stop with one click. Consent to communications is separate from a contact enquiry: writing to us through the contact form does not subscribe you to anything.

4. How long we keep it

• Messages from the contact form: for as long as is needed to handle the enquiry and, if no contractual relationship follows, no more than 24 months from the last meaningful contact.
• Data of people who subscribe to receive the guide: until consent is withdrawn and in any case no longer than 24 months from the last interaction, unless you renew your subscription or continue to engage with the communications.
• Contractual, administrative and tax data: for the period required by law, normally 10 years.
• Technical and security data: for as long as is needed to keep the site working, save for the investigation of unlawful acts.
• Visit statistics: in aggregate form, with no data relating to you individually.

Where the data is kept. As well as in the mailbox, the data you give us through the forms is kept in an internal archive of ours, on a server in the European Union (Germany) that we run ourselves: it is what stops a request from getting lost, and what lets us know what we wrote to you and when. To ask for it to be deleted, write to [email protected].

5. Who else sees the data

The data is not disseminated. It may be processed on our behalf and on our instructions by the suppliers we need in order to run the site and the mail. These are they, by name:

Supplier	What it is for	Where it processes data
Cloudflare, Inc.	Site hosting, network protection, visit statistics and anti-spam verification	United States, with network nodes in the European Union
Resend, Inc.	Delivery of the emails sent by the site: contact form messages, the revenue management guide, the check-up result and any later communications	United States, with the messages stored in the European Union
Google Ireland Ltd.	The mailbox where we receive and store the messages	European Union

To these are added our tax, administrative and legal advisers, and public authorities in the cases provided for by law.

6. Transfers outside the European Union

Cloudflare and Resend are US companies. Transfers take place on the basis of the standard contractual clauses approved by the European Commission and, where applicable, the adequacy decision on the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards adopted by writing to the address at the foot of this page.

7. Cookies

This site does not install profiling cookies or analytics cookies. There is no consent banner because there is nothing that requires one. The only possible cookies are the technical ones set by Cloudflare for network security and, if enabled, the temporary one Turnstile uses to verify a form submission: both are necessary for the site to work and do not require consent.

8. Automated decision-making

The data collected by this site does not feed automated decision-making processes or profiling activities producing legal effects or similarly significantly affecting you.

9. Your rights

At any time, under Articles 15 to 22 of the GDPR, you may:

• obtain confirmation as to whether or not your data is being processed, and access it;
• ask for inaccurate data to be corrected, or incomplete data to be completed;
• ask for your data to be erased, in the cases provided for by law;
• ask for processing to be restricted;
• object to processing based on legitimate interest;
• receive your data in a structured, commonly used, machine-readable format;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the Italian Data Protection Authority.

To exercise them, write to [email protected]: we reply within one month, as the law requires. If you believe the processing infringes the GDPR you may contact the Italian Data Protection Authority.

10. Changes to this notice

We may update it when the processing, the suppliers or the law change. The date at the top always shows the latest revision: if the changes are substantial, and you have left us an address, we will tell you by email.

11. Language of this notice

This is a translation provided for convenience. The Italian version is the reference text: in the event of any discrepancy between the two, the Italian version prevails.

Contact
VENUS LAB S.R.L. — Viale Ravenna 3, 48015 Cervia (RA), Italy
[email protected] — +39 389 123 3063