Privacy Policy
Tholus Dome privacy policy (the usual neXt Srl). Explains how we collect, use and protect your personal data under GDPR.
1. Data Controller
the usual neXt S.r.l.
VAT IT02182990669
Email: [email protected]
2. Data Collected
We collect the following data:
- Navigation data — IP address, browser type, pages visited, duration of visit.
- Registration data — first name, last name, email, password (hashed) when you create an account.
- Booking data — name, email, phone, payment details (handled by Stripe).
- Contact data — information provided through the contact form.
3. Purpose and Legal Basis
- Service delivery (Art. 6(1)(b) GDPR) — performance of the booking contract.
- Legal obligations (Art. 6(1)(c) GDPR) — tax and accounting requirements.
- Legitimate interest (Art. 6(1)(f) GDPR) — site security, fraud prevention.
- Consent (Art. 6(1)(a) GDPR) — newsletter and marketing communications.
4. Data Retention
Booking and accounting data is retained for 10 years (tax obligations). Account data is retained until account deletion. Navigation logs are retained for 12 months.
5. Third Parties
- Stripe Inc. — payment processing
- Hetzner Online GmbH — EU-based server hosting
- Mailgun / Resend — transactional email delivery
No data is sold or shared with third parties for marketing purposes.
6. Your Rights
You have the right to access, rectify, delete your data, object to processing, request portability and withdraw consent. Write to [email protected].
