Privacy Policy

1. Data controller

The data controller is [DATA CONTROLLER’S LEGAL NAME], with registered office at [FULL REGISTERED ADDRESS], tax or VAT number [TAX/VAT NUMBER].

Contact: [PRIVACY EMAIL]. DPO, if appointed: [DPO CONTACT DETAILS].

2. Scope of this policy

This policy applies to anticopozzorelais.com. It does not cover processing carried out independently by external websites and services reached through links, such as WhatsApp and Google Maps.

3. Data processed and purposes

Technical browsing data

IT systems and hosting infrastructure may process the IP address, date and time of the request, requested resource, user agent, response status and other technical data required to deliver the website, maintain its security and stability, and diagnose faults.

The legal basis is the controller’s legitimate interest in making the website available and protecting it, under Article 6(1)(f) GDPR.

Availability requests

The form on the homepage processes check-in and check-out dates and the number of guests locally in the browser. The website does not send this data to its own server and does not store it. After an explicit action by the user, WhatsApp opens with a pre-filled message that can be edited or cancelled before sending.

When the user sends a message through WhatsApp or contacts the property by telephone, the information provided is processed to reply, check availability and take pre-contractual steps at the user’s request under Article 6(1)(b) GDPR.

4. Providing data

Technical data is required to use the website. Contacting the property through WhatsApp or by telephone is optional; without the stay dates and number of guests, the property may be unable to check availability.

5. Processing and security

Data is processed using electronic tools and organisational and technical safeguards proportionate to the risks. The website is static, has no database or CMS, and does not use profiling or automated decision-making. The language selector uses ordinary links and does not store a language preference in cookies or browser storage.

6. Recipients and providers

Technical data may be processed by the hosting and CDN provider used to deliver and protect the website. Information voluntarily sent through WhatsApp is received by the controller and is also processed by that service provider under its privacy policy for the European Economic Area.

Data may also be disclosed to authorised advisers or providers where necessary, and to public authorities where required by law. It is not made public.

7. Transfers outside the European Economic Area

Some technology providers may process data in countries outside the European Economic Area. The controller must ensure that any transfer relies on an adequacy decision or appropriate safeguards under Articles 45–49 GDPR.

8. Retention

The website does not retain data entered in the availability form. Technical logs are kept for the period defined by the hosting provider and the controller’s settings, solely for security, diagnostics and legal obligations: [SPECIFY OR CONFIRM THE PERIOD].

Information contained in requests received through WhatsApp or by telephone is retained for as long as required to manage the request and, if a booking is made, for any additional periods required by administrative, tax or legal obligations: [DEFINE THE APPLICABLE PERIODS].

9. Data subject rights

Where provided for by the GDPR, data subjects may request access, rectification, erasure, restriction of processing, data portability and object to processing. They may also withdraw consent, where applicable, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to [PRIVACY EMAIL]. Data subjects may lodge a complaint with the Italian Data Protection Authority or their competent supervisory authority.

10. External services and links

Google Maps is neither embedded nor loaded automatically. The map shown on the page is a local image; Google Maps is reached only after the user clicks the link. From that point, the external service’s terms and privacy information apply.

11. Changes to this policy

This policy must be updated whenever the website’s features, providers, purposes or processing methods change. The date of the latest revision appears at the top of this page.