Privacy notice

Stay requests

If you send a request, we process your name, email, dates, number of guests, language and any message, only to reply to you and manage your stay. Name and email are needed so we can reply. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

If you email or call us, we use your data only to reply to you.

Browsing

The server records technical request data (IP address, browser, page visited) to deliver the pages and protect them from abuse. The IP address is also used to limit repeated form submissions, and for this purpose it stays only temporarily in memory. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Providers and transfers

The following process data on our behalf: Vercel (hosting), a self-managed n8n installation (forwarding requests), Telegram (notifying the host of requests) and a self-managed Supabase installation on Oracle Cloud (booking records).

Vercel is based in the USA: the transfer relies on the EU-US Data Privacy Framework or Standard Contractual Clauses. Telegram may process data outside the EU: the transfer is necessary to handle the request you send us (Art. 49(1)(b) GDPR).

Airbnb receives only the occupied dates, with no guest data. Your data is not sold or passed on to anyone else.

How long data is kept

Requests not followed by a stay are kept for up to 12 months. Stay data is kept for as long as the law requires, up to 10 years for tax obligations. Technical logs follow Vercel’s retention periods.

Cookies

The site uses a single technical cookie, NEXT_LOCALE, which remembers your chosen language for one year and is exempt from consent (Art. 122 of the Italian Privacy Code). There are no profiling cookies, analytics or third-party cookies, which is why you see no banner. Fonts are served by the site itself. The map link opens Google Maps only if you click it: Google’s privacy notice applies from there.

Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to processing (Arts. 15–22 GDPR), by writing to the address above. You can also lodge a complaint with the Italian data protection authority, the Garante (garanteprivacy.it).