Privacy notice
Last updated:
This notice explains what data this website processes and why, under EU Regulation 2016/679 (GDPR). In short: the website uses no cookies and no analytics; what you write in the contact form is used only to reply to you and is not stored on the website.
Data controller
The controller is the private owner of the apartment.
Being finalised: the controller’s name and contact details will be shown here before the website is officially launched.
Browsing data
The website is hosted by Cloudflare, Inc. To deliver the pages and protect the site from abuse, Cloudflare’s servers process technical data such as IP address, browser type and requested pages. The controller does not use this data to identify visitors.
Legal basis: legitimate interest in running and securing the website (Art. 6(1)(f) GDPR). Cloudflare acts as processor; data may also be processed outside the European Union with the safeguards required by the GDPR. Details in Cloudflare’s privacy policy.
Cookies
The website sets no profiling or analytics cookies and uses no analytics tools. The only technical exception is the form’s spam check (see above), which may store data strictly needed for security, on the Contact page only. That is why there is no cookie banner.
Contact form
If you use the contact form, we process the data you enter: name, email, language, dates, number of guests, pets and message. It is used only to answer your request and, if you then book, to arrange your stay. We never ask for a phone number or ID documents.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The website does not store messages: it forwards them by email to the owner’s inbox. Sending is handled by Resend, Inc. (United States) and the owner’s inbox is hosted by Google; both act as providers, with the safeguards required by the GDPR for transfers outside the European Union.
Messages are kept in the owner’s inbox for as long as needed to reply and manage any stay, and no longer than 12 months after the last contact, unless the law requires otherwise.
Spam check: when you start filling in the form, Cloudflare Turnstile is loaded. It processes technical data such as IP address and browser type to tell people from automated programs. Legal basis: legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR). Details in Cloudflare’s Turnstile privacy addendum.
Messages through Booking.com and Airbnb
If you message the owner through Booking.com or Airbnb, your data is also processed by those platforms under their own privacy notices. The owner uses your data only to reply, manage your stay and meet legal obligations such as guest registration.
External links
Links to Booking.com, Airbnb, the official residence website and other sites lead to services with their own privacy notices.
Your rights
You can request access, rectification, erasure, restriction, objection and portability (Articles 15-22 GDPR) and lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
Changes
This notice is updated whenever the processing described here changes. The date of the last update is shown at the top.