Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains how Queenlike Concierge S.r.l., operating under the brand Savoring Slowly ("Savoring Slowly", "we", "us" or "our"), collects, uses, shares and protects personal data when you visit www.savoringslowly.com (the "Website"), send us an inquiry, book a stay, an experience or a service through us, or otherwise communicate with us.

We are established in Italy and we process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR"), the Italian Personal Data Protection Code (Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018) and the applicable guidance of the Italian Data Protection Authority (Garante per la protezione dei dati personali). Because many of our guests live in the United States, Section 12 contains additional disclosures and rights for residents of California and other U.S. states. Information about cookies is provided in our separate Cookie Policy, which is managed through our consent platform (Cookiebot).

1. Summary of key points

  • Who is responsible: Queenlike Concierge S.r.l., Largo Valtournanche 3, 00141 Rome, Italy, is the data controller.
  • What we collect: the details you give us when you contact us or plan a stay (name, email address, phone number, travel dates, number of guests, preferences and requirements, marketing choices), the information needed to arrange and invoice a booking, and limited technical data collected automatically when you use the Website (such as your IP address and browser information).
  • Why: to answer your inquiry and check availability, to arrange and manage your stay and any services you request, to send you marketing emails only if you have opted in, to keep the Website secure, to comply with Italian tax and accounting law, and, only with your consent, to measure how the Website is used.
  • Payments: we never collect card details on the Website. Payments are made by bank transfer or through a payment link (Stripe or PayPal) that we send you after your request has been confirmed.
  • Sharing: we share personal data only with the providers that host and run our services, with the owners and managers of the homes and the local partners needed to deliver your stay, with payment providers, with our professional advisers and with public authorities where the law requires it. We do not sell your personal data and we do not share it for targeted advertising.
  • Where: your data is stored in Italy (European Union). Some of our providers are located in the United States and receive data under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
  • How long: inquiries that do not lead to a booking are kept for 12 months; booking and invoicing records are kept for 10 years as required by Italian law; marketing data is kept until you withdraw your consent.
  • Your rights: you can access, correct, delete or receive a copy of your data, object to or restrict certain processing, withdraw your consent at any time and complain to a supervisory authority. U.S. residents have additional rights described in Section 12.
  • Contact: info@savoringslowly.com.

2. Data controller and contact details

The data controller is:

Queenlike Concierge S.r.l.
Largo Valtournanche 3
00141 Rome (RM), Italy
VAT number and tax code: IT17613391006
Email: info@savoringslowly.com
Certified email (PEC): queenlikeconcierge@pec.it
Phone: +39 349 7294027

We have not appointed a Data Protection Officer because we are not required to do so. For any question or request concerning your personal data, please write to info@savoringslowly.com.

3. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with the Website, our contact and booking forms, our email, telephone, WhatsApp and Instagram communications, and the stays, experiences, events and services we arrange for you. It does not apply to websites, applications or services operated by third parties, including the owners of the homes we present, the payment providers we use and the social networks you may reach through links on the Website. Those third parties have their own privacy policies, and we encourage you to read them.

Our Website is intended for adults. Section 13 explains our approach to children's data.

4. Personal data we collect

4.1 Information you provide to us

Inquiry and booking forms. When you use the "Plan Your Stay" or "Private Inquiry" forms on the Website, we collect the information you enter, which may include: your full name, email address, phone number, preferred check-in and check-out dates, number of guests, the chalet or location you are interested in, your message and your stay requirements, your acceptance of our Terms and Conditions and of this Privacy Policy, and whether you agree to receive marketing communications from us. Fields marked with an asterisk are required to process your request; the other fields are optional.

Direct communications. When you contact us by email, telephone, WhatsApp or Instagram, we collect the contact details you use and the content of your communications, including any documents or preferences you send us.

Booking, stay and service details. If you decide to book a stay, an experience, an event or a service through us, we collect the information needed to arrange and manage it, such as the names of the people who will stay, their ages where relevant (for example for family services or child equipment), arrival and departure details, special requests, the additional services you choose (for example private chef, transfers, wellness treatments, housekeeping, childcare, activities), and the information needed to issue a quotation, a confirmation and an invoice (billing name, address, and, where required by Italian law, tax identification details).

Guest registration details. Under Italian law, everyone staying in tourist accommodation in Italy must be registered with the State Police (through the "Alloggiati Web" portal) and, in most municipalities, reported for tourist tax and statistical purposes. To comply with these obligations, we or the host of the home may ask you, at or before check-in, for identity details of all guests (name, surname, date and place of birth, nationality, and the type and number of an identity document, which the host may need to inspect).

Corporate retreats, events and creative projects. If you contact us on behalf of a company or an organisation, we also collect your job title, the name of your organisation and the details needed to plan and invoice the event.

Information about other guests. If you provide personal data about other people (for example the members of your party, a colleague or a guest of your event), you confirm that you are entitled to share it with us and that you have informed them about this Privacy Policy.

Sensitive information you choose to share. We do not ask for special categories of personal data. However, to arrange your stay you may voluntarily tell us about dietary requirements, allergies, health conditions, accessibility or mobility needs, or other information that reveals sensitive aspects of your life. We use this information only to arrange the stay and the services you have requested, we share it only with the providers who need it for that purpose, and we process it on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give by providing the information and which you can withdraw at any time. If you prefer, you may discuss these needs with us by telephone rather than in writing.

Marketing preferences. If you tick the marketing consent box in one of our forms, or otherwise ask to receive our communications, we record your choice and the date on which you gave it.

4.2 Information collected automatically

Server logs. Our hosting provider records technical data about visits to the Website, such as your IP address, the date and time of the request, the pages requested, the referring page, the browser type and the operating system. This information is used for security, troubleshooting and abuse prevention.

Anti-bot protection (Cloudflare Turnstile). Our forms are protected by Cloudflare Turnstile, which verifies that a submission comes from a person and not from an automated program. When you use a form, Cloudflare processes technical information about your browser and device (such as your IP address, browser characteristics and interaction signals) and issues a token that allows us to accept the submission. Cloudflare does not use this information to build advertising profiles.

Fonts. The Website uses web fonts delivered by the Google Fonts service. When a page loads, your browser requests the font files from Google's servers and, in doing so, discloses your IP address and technical browser information to Google.

Analytics (only with your consent). Where you give your consent through our cookie banner, we use Google Analytics 4 to understand how visitors use the Website (for example the pages viewed, the approximate location derived from the IP address, the device and browser used, the source of the visit and the interactions with the pages). Google Analytics 4 does not log or store full IP addresses. We do not enable advertising features, we do not link analytics data to your identity and we do not use it for targeted advertising. If you do not consent, no analytics data is collected.

Cookies and similar technologies. The Website uses only the cookies described in our Cookie Policy. Non-essential cookies are set only after you have given your consent through the cookie banner, and you can change or withdraw your choices at any time through the "Cookie settings" link. Our consent management platform records your consent choices (an anonymised identifier, the date and time, the choices made and a truncated IP address) so that we can prove that consent was obtained.

4.3 Information we receive from third parties

When you pay through a payment link, Stripe or PayPal informs us whether the payment was successful and provides the information needed to reconcile it (such as the amount, the date, the last digits of the card or the account name). We do not receive or store your full card number or your bank login details. We may also receive information from the owners, managers and local partners of the homes we present in connection with the organisation of your stay (for example confirmation of availability, check-in arrangements or requests concerning your stay).

4.4 Information we do not collect

We do not collect payment card numbers on the Website, we do not offer user accounts or public comments, and we do not use your personal data for automated decisions that produce legal or similarly significant effects on you.

5. Why we use your personal data and on what legal basis

Under the GDPR we may process your personal data only if we have a valid legal basis. The table below describes the purposes for which we use your data and the corresponding legal basis.

Purpose Personal data used Legal basis (GDPR)
Responding to your inquiries, checking availability and preparing a proposal or quotation Contact details, travel dates, number of guests, preferences, requirements and the content of your messages Steps taken at your request prior to entering into a contract (Article 6(1)(b))
Arranging, confirming and managing your stay, experience, event or services, including communications before, during and after your stay and assistance with any issue Booking and stay details, guest names, contact details, special requests, communications Performance of a contract with you (Article 6(1)(b)); for other guests of your party, our legitimate interest in delivering the stay you booked (Article 6(1)(f))
Arranging services provided by local partners on your behalf (chef, transfers, wellness, childcare, housekeeping, activities and similar services) The details strictly needed by each provider (names, number of guests, dates, times, location, requests) Performance of a contract (Article 6(1)(b))
Guest registration with the State Police, tourist tax and statistical reporting required by Italian law Identity details of all guests Compliance with a legal obligation (Article 6(1)(c)), which applies to us or to the host of the home
Invoicing, accounting, tax compliance and record keeping Billing details, booking and payment records Compliance with a legal obligation (Article 6(1)(c))
Processing payments by bank transfer or through a payment link Name, amount, payment status and reconciliation data Performance of a contract (Article 6(1)(b))
Sending you newsletters, offers and updates about our homes, experiences and services by email Name, email address, consent record, your interests where you have shared them Your consent (Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code), which you may withdraw at any time
Arranging dietary, health-related or accessibility requests you have voluntarily shared with us The information you provided Your explicit consent (Article 9(2)(a))
Keeping the Website and our forms secure, preventing spam, abuse and fraud, and diagnosing technical problems Server logs, IP address, technical information, anti-bot verification data Our legitimate interest in the security of our services (Article 6(1)(f))
Delivering the Website, including web fonts IP address and technical browser information Our legitimate interest in operating the Website (Article 6(1)(f))
Measuring the audience and improving the Website (Google Analytics 4) Pseudonymous usage data described in Section 4.2 Your consent given through the cookie banner (Article 6(1)(a))
Recording and proving your consent choices Consent records Compliance with a legal obligation (Article 6(1)(c), Article 7 GDPR)
Establishing, exercising or defending legal claims, handling complaints and disputes, and cooperating with authorities The data relevant to the claim or request Our legitimate interest (Article 6(1)(f)) and, where applicable, compliance with a legal obligation (Article 6(1)(c))

Where we rely on our legitimate interests, we have assessed that our interests are not overridden by your interests, rights and freedoms. You have the right to object to processing based on legitimate interests, as described in Section 11.

Providing the personal data marked as required in our forms, or requested to arrange a booking, is necessary to respond to you and to conclude and perform the contract; if you do not provide it, we will not be able to process your request. Providing marketing consent is always optional and does not affect your ability to book with us.

6. Marketing communications

We send marketing emails only to people who have opted in by ticking the marketing consent box in our forms or by asking us to keep them informed. Our communications are sent through our own internal systems; we do not use an external newsletter provider. Each marketing email contains an unsubscribe link. You may also withdraw your consent at any time by writing to info@savoringslowly.com. Withdrawing your consent does not affect the lawfulness of the processing carried out before the withdrawal, and it does not affect the emails we need to send you to manage an inquiry or a booking (for example availability, confirmations, payment links and information about your stay), which are not marketing.

We do not sell or rent your contact details to third parties, and we do not allow third parties to send you marketing on our behalf.

7. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with our legal obligations. In particular:

  • Inquiries and information requests that do not result in a booking: 12 months from our last contact with you, after which the data is deleted.
  • Bookings and services you have purchased: the booking, invoicing and payment records are kept for the period required by Italian tax and accounting law, which is 10 years from the end of the financial year in which the service was provided (Article 2220 of the Italian Civil Code and applicable tax legislation).
  • Marketing: your contact details and consent record are kept until you withdraw your consent, by using the unsubscribe link or by emailing us, after which your details are removed from our marketing lists. We may keep a minimal record of your withdrawal to make sure we respect it.
  • Sensitive information voluntarily provided for a stay: deleted after the stay, unless you ask us to keep it for future stays.
  • Guest registration details: transmitted to the authorities as required by law and kept only for the period the law requires.
  • Server logs and security data: kept for no longer than 12 months, unless they are needed for a security investigation or a legal claim.
  • Consent records of the cookie banner: 12 months.
  • Analytics data: up to 14 months, in aggregated or pseudonymous form.
  • Correspondence relating to a complaint, a dispute or a legal claim: until the matter is closed and the applicable limitation periods have expired.

When the retention period expires, we delete or anonymise the data.

8. Who we share your personal data with

We share personal data only when necessary and only with the following categories of recipients.

Service providers acting on our behalf (processors). These companies process personal data only on our instructions and under a data processing agreement:

  • Aruba S.p.A. (Italy): web hosting of the Website, hosting of our email and certified email services, and the sending of the Website's emails. Data is stored in Italy.
  • Google LLC and Google Ireland Limited: our team reads the messages received at our business mailbox also through a Gmail account to which they are forwarded; Google also provides the Google Fonts service and, only if you consent, Google Analytics 4.
  • Cloudflare, Inc. (United States): Turnstile anti-bot protection of our forms.
  • Usercentrics A/S (Denmark): the Cookiebot consent management platform that operates our cookie banner and stores consent records.

Hosts and local partners who help us deliver your stay. To arrange the stay, experiences, events and services you request, we share the strictly necessary details (names, number of guests, dates, contact details, special requests and, where relevant, the sensitive information you have chosen to share) with the owners or managers of the home you have chosen and with the local providers of the services you have requested (for example private chefs, drivers and transfer companies, wellness professionals, childcare providers, housekeeping staff, activity guides and event suppliers). Where these partners process your data for their own purposes, for example when a host registers guests with the authorities, they do so as independent data controllers under their own privacy policies.

Payment providers and banks. Payments are made outside the Website through a link that we send you or by bank transfer. Stripe Payments Europe, Ltd. (Ireland) and the other Stripe group companies, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and our bank process your payment data as independent data controllers, in accordance with their own privacy policies (Stripe, PayPal).

Communication platforms you choose to use. If you contact us through WhatsApp or Instagram, your messages are also processed by Meta Platforms Ireland Limited and Meta Platforms, Inc. under their own terms and privacy policies. We use these channels only because you have chosen to reach us through them.

Professional advisers, insurers and authorities. We may share personal data with our accountants, lawyers, auditors and insurers where necessary, and with public authorities, courts, the State Police and tax authorities where the law requires it or where necessary to establish, exercise or defend legal claims.

Business transfers. If our business or part of it is sold, merged or reorganised, personal data may be transferred to the new owner, who will remain bound by this Privacy Policy.

We do not sell personal data, we do not share it for cross-context behavioural or targeted advertising, and we do not disclose it to data brokers.

9. International data transfers

Our Website and our records are hosted in Italy, within the European Union. Some of the providers listed in Section 8 are located in, or may access data from, the United States. Where personal data is transferred outside the European Economic Area, we rely on one of the safeguards recognised by the GDPR: the provider's certification under the EU-U.S. Data Privacy Framework (this currently applies to Google LLC and Cloudflare, Inc.), the Standard Contractual Clauses adopted by the European Commission, supplemented where necessary by additional measures, or an adequacy decision covering the destination country. You may request further information about these safeguards by contacting us.

If you are located outside the European Union, including in the United States, please note that your personal data will be transferred to and processed in Italy, where data protection laws may differ from those of your country. By sending us an inquiry or booking with us, you acknowledge this transfer. The protections described in this Privacy Policy apply regardless of where you live.

10. Cookies and similar technologies

Our Cookie Policy, generated and kept up to date by our consent management platform, lists each cookie used on the Website, its provider, its purpose and its duration. Strictly necessary cookies are used without consent because the Website cannot work without them. Statistics cookies (Google Analytics 4) are used only after you have accepted them in the cookie banner. You can accept, refuse or customise your choices when you first visit the Website and change them at any time through the "Cookie settings" link. Refusing non-essential cookies does not limit your ability to use the Website or to contact us.

The Website does not use advertising or social media tracking cookies. Links to Instagram and WhatsApp are plain links: no data is sent to those platforms unless you click on them.

11. Your rights under the GDPR

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

  • Access: to obtain confirmation of whether we process your personal data and to receive a copy of it, together with information about the processing.
  • Rectification: to have inaccurate data corrected and incomplete data completed.
  • Erasure ("right to be forgotten"): to have your data deleted, for example when it is no longer needed or when you withdraw your consent, unless we must keep it to comply with a legal obligation or to establish, exercise or defend legal claims.
  • Restriction: to ask us to limit the processing of your data in the circumstances provided by Article 18 GDPR.
  • Data portability: to receive the data you have provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
  • Objection: to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and to object at any time to the use of your data for direct marketing.
  • Withdrawal of consent: to withdraw any consent you have given at any time, without affecting the lawfulness of the processing carried out before the withdrawal.
  • Automated decision-making: not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not carry out such decisions.

To exercise your rights, please email info@savoringslowly.com or write to the postal address in Section 2. We may ask you for information to confirm your identity before we act on your request. We will respond within one month; this period may be extended by two further months where necessary, taking into account the complexity and number of requests, in which case we will inform you. Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. The Italian supervisory authority is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, www.garanteprivacy.it, email garante@gpdp.it. We would, however, appreciate the chance to address your concerns before you approach the authority, so please contact us first.

If you are in the United Kingdom or Switzerland, you have equivalent rights under the UK GDPR and the Swiss Federal Act on Data Protection, and you may complain to the Information Commissioner's Office (ICO) or to the Federal Data Protection and Information Commissioner (FDPIC) respectively.

12. Additional information for residents of the United States

This Section applies to you if you are a resident of the United States. It supplements the rest of this Privacy Policy and is provided to comply, to the extent applicable to us, with the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"), the California Online Privacy Protection Act, and the comprehensive consumer privacy laws of other states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island (together with the CCPA, the "U.S. State Privacy Laws"). Where these laws do not strictly apply to a company of our size and activity, we nevertheless honour the rights described below as a matter of policy.

12.1 Notice at collection: categories of personal information

In the last 12 months we have collected the following categories of personal information, as defined by the CCPA. The sources, purposes and disclosures are described in Sections 4, 5 and 8 of this Privacy Policy and summarised in the table.

Category Examples of what we collect Sources Business purposes Disclosed to
Identifiers Name, email address, phone number, postal address, IP address You; your device Responding to inquiries, arranging and managing stays and services, invoicing, security, marketing with consent Hosting and email providers, anti-bot and consent providers, hosts and local partners, payment providers, advisers, authorities
Personal information categories listed in Cal. Civ. Code §1798.80(e) Name, address, telephone number, billing details, payment status (we do not store card numbers) You; payment providers Arranging and invoicing stays and services, accounting Payment providers, banks, hosts, advisers, authorities
Commercial information Inquiries, quotations, bookings, services purchased, preferences and requirements for your stay You; hosts and partners Arranging and managing stays and services, record keeping Hosts and local partners, advisers, authorities
Internet or other electronic network activity Server log data, pages visited, interactions with the Website, anti-bot verification data, analytics data (only with consent) Your device Security, troubleshooting, audience measurement Hosting provider, Cloudflare, Google (analytics, only with consent)
Geolocation data Approximate location derived from your IP address Your device Security, audience measurement with consent Hosting provider, Google (analytics, only with consent)
Professional or employment-related information Job title and organisation of the person who contacts us for a corporate retreat, event or creative project You Planning and invoicing events Hosts and local partners, advisers
Sensitive personal information Identity document details required by Italian law for guest registration; health, dietary or accessibility information you voluntarily share with us You Complying with legal obligations; arranging the stay and services you have requested State Police (guest registration), hosts and the specific partners who need the information
Inferences None. We do not create profiles about you. - - -

We do not collect audio, electronic, visual, thermal, olfactory or similar information, biometric information, educational information, or information about your characteristics protected under California or federal law. We use sensitive personal information only for the purposes permitted by the CCPA (to provide the services you request and to comply with the law), and we do not use or disclose it to infer characteristics about you; the right to limit the use of sensitive personal information therefore does not apply to our processing.

12.2 Sale and sharing of personal information

We have not sold personal information and we have not shared personal information for cross-context behavioural advertising in the preceding 12 months, and we do not intend to do so. We do not sell or share the personal information of consumers under 16 years of age. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, and we do not process personal data for targeted advertising. Because we do not sell or share personal information, no opt-out is required; if we ever change our practices, we will update this Privacy Policy and provide the required "Do Not Sell or Share My Personal Information" mechanism.

12.3 Retention

We retain each category of personal information for the periods described in Section 7. Where a specific period cannot be stated, we determine it on the basis of the purpose of collection, our legal obligations and the applicable limitation periods.

12.4 Your rights

Depending on the state in which you live, you may have the following rights, subject to the exceptions provided by law:

  • Right to know and to access: to confirm whether we process your personal information and to obtain the categories of personal information collected, the categories of sources, the purposes, the categories of third parties to whom it was disclosed, and the specific pieces of personal information we hold about you.
  • Right to correct: to have inaccurate personal information corrected.
  • Right to delete: to have your personal information deleted, subject to the exceptions provided by law (for example where we must keep records for tax purposes or to complete a transaction you requested).
  • Right to data portability: to obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
  • Right to opt out: to opt out of the sale of personal information, the sharing or processing of personal information for targeted advertising, and profiling in furtherance of significant decisions. We do not carry out these activities.
  • Right to limit the use of sensitive personal information: as explained above, we use sensitive personal information only for permitted purposes.
  • Right to non-discrimination: we will not deny you our services, charge you different prices or provide a different level of quality because you exercised your rights.
  • Right to appeal: if we deny your request, you may appeal our decision as described below.

12.5 How to exercise your rights

You can submit a request by emailing info@savoringslowly.com with the subject line "U.S. Privacy Request", or by calling +39 349 7294027, or by writing to the postal address in Section 2. Please tell us which right you wish to exercise, the state in which you live and the email address or phone number you used with us, so that we can locate your data.

Verification. To protect your data, we will verify your identity by matching the information you provide with the information we hold (for example by sending a confirmation message to the email address on file). We may ask for additional information where necessary. We will only use the information you provide for verification purposes.

Authorised agents. You may designate an authorised agent to submit a request on your behalf. We will ask the agent for proof of your written authorisation and we may ask you to verify your identity directly with us, unless the agent holds a power of attorney.

Timing. We will confirm receipt of your request within 10 business days and respond within 45 days. If we need more time (up to a further 45 days), we will tell you why. We will respond to requests to know and to access no more than twice in a 12-month period. Our response is free of charge, unless requests are manifestly unfounded, excessive or repetitive.

Appeals. If we decline to act on your request, we will explain our reasons. You may appeal our decision by replying to our response or by emailing info@savoringslowly.com with the subject line "Privacy Appeal". We will inform you in writing of the outcome of your appeal within 45 days (60 days in some states) and, if we deny your appeal, we will provide the contact details of the Attorney General of your state, to whom you may submit a complaint.

12.6 Additional California disclosures

Do Not Track and Global Privacy Control. Because we do not sell or share personal information and do not use tracking for targeted advertising, there is no opt-out to apply. Our Website does not respond to browser "Do Not Track" signals, for which no industry standard exists. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to refuse non-essential cookies for that browser, in addition to any choice you make in our cookie banner.

Financial incentives. We do not offer financial incentives or price or service differences in exchange for the retention or sale of personal information.

"Shine the Light" (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

California minors. Our Website does not offer accounts or public posting features; if a minor has provided personal information to us, the minor or a parent may request its deletion by contacting us.

12.7 Residents of other states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, and of any other state that adopts a comprehensive privacy law, may exercise the rights listed in Section 12.4 through the channels described in Section 12.5, including the right to appeal. We do not sell personal data, we do not process it for targeted advertising and we do not carry out profiling in furtherance of decisions that produce legal or similarly significant effects.

13. Children

The Website and our services are addressed to adults. We do not knowingly collect personal data from children under 16 through the Website, and we do not allow children to submit our forms. Personal data about children who will take part in a stay (for example their names and ages, needed to arrange family services or childcare) is provided by a parent or guardian and is used only to arrange the stay. If you believe that a child has provided us with personal data, please contact us and we will delete it.

14. How we protect your personal data

We apply technical and organisational measures appropriate to the risk, including encryption of the connection to the Website (HTTPS), anti-bot protection of our forms, authenticated and encrypted email transmission, access to personal data limited to the people who need it, secure hosting with an established European provider, regular updates of the software we use, and contractual obligations on our processors. No transmission over the internet or storage system can be guaranteed to be completely secure; if we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the competent authority and, where required, inform you in accordance with the applicable law.

15. Third-party websites and services

The Website contains links to third-party websites and services, including our sister website www.savoringexperiences.com, our Instagram profile, WhatsApp, and the payment pages of Stripe and PayPal. We are not responsible for the privacy practices of these third parties. When you leave the Website, we encourage you to read the privacy policy of every website or service you use.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, in the providers we use or in the applicable law. The date at the top of the page indicates when it was last revised. Where the changes are significant, we will inform you through a notice on the Website or, where we hold your email address and the law requires it, by email. We encourage you to review this page periodically.

17. How to contact us

For any question, request or complaint concerning this Privacy Policy or the way we handle your personal data, please contact:

Queenlike Concierge S.r.l. (Savoring Slowly)
Largo Valtournanche 3, 00141 Rome (RM), Italy
Email: info@savoringslowly.com
Certified email (PEC): queenlikeconcierge@pec.it
Phone: +39 349 7294027

This Privacy Policy is drafted in English. It is governed by Italian law.