Privacy policy

This privacy policy explains which personal data we process when you visit our website, contact us or book a stay with us, and what rights you have. It is based on the General Data Protection Regulation (GDPR) and the Italian data protection code (Legislative Decree 196/2003).

In short: this website sets no cookies of its own and uses no analytics or tracking tools. Data you give us is used only to handle your enquiry or booking.

The controller responsible for data processing on this website is:

This website runs on a server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which operates it on our behalf (Art. 28 GDPR). Each time a page is requested, your browser automatically transmits information that is stored in log files:

• IP address
• date and time of the request
• the page requested and the amount of data transferred
• browser type, browser version and operating system
• the previously visited page (referrer)

This data is technically necessary to deliver the website and protect it against attacks. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). We do not combine it with other data and delete it as soon as it is no longer needed for this purpose.

• Hetzner privacy policy

We do not set any cookies ourselves and use no analytics, advertising or tracking services. Fonts are loaded from our own server; no connection to Google is made when you visit the website.

The embedded booking systems may set their own cookies once their calendar or booking form loads. These cookies are technically necessary for the booking and therefore do not require consent. See the section "Booking systems" below.

Language hint: if your browser is set to another language in which this website also exists, we show a line at the top linking to that version. Your browser language is read on your own device only; we do not evaluate your IP address or your location, and nothing is transmitted to us. We do not redirect you. If you dismiss the hint, your browser remembers that for the current session only (session storage) and forgets it when you close the tab.

On your first visit, a notice at the bottom of the screen asks whether you allow optional cookies. We only set optional cookies if you agree. Your choice is kept in your browser's local storage for six months, after which we ask again. You can change it at any time via "Cookie settings" at the foot of the page.

If you contact us through the contact form, by email or by phone, we process the details you provide (such as your name, email address, phone number and the content of your message) to answer your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a booking or an order, and otherwise our legitimate interest in replying (Art. 6(1)(f) GDPR). We do not pass this data on without your consent.

Messages from the contact form at the foot of every page are forwarded to our inbox by the email service Resend. The provider is Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes your name, email address and message solely on our behalf and on our instructions. For this purpose we have concluded a data processing agreement with Resend under Art. 28 GDPR. Nothing is stored on this website itself.

As Resend is based in the USA, data may be transferred there. Resend is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the data processing agreement includes the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

• Resend privacy policy
• Resend data processing agreement

To reserve and provide your stay, we process the data required for it, in particular:

• name and address
• email address and phone number
• travel dates, number of guests and chosen accommodation
• payment information

The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

As an accommodation provider in Italy, we are required by law to record the personal details of every guest from an identity document on arrival and to report them to the police (Art. 109 TULPS, via the "Alloggiati Web" portal). The legal basis for this is Art. 6(1)(c) GDPR.

The availability calendars and booking forms on our website are provided by Smoobu (Smoobu GmbH, Berlin, Germany) and More Bookings, the services we use to manage our bookings.

As soon as a calendar or form loads, your browser connects to the provider's servers. At least your IP address is transmitted, and the provider may set cookies that are technically necessary for the booking. The data you enter in the form is processed by the provider on our behalf in order to pass your booking on to us (Art. 6(1)(b) and Art. 28 GDPR).

• Smoobu privacy policy
• More Bookings privacy policy

Payments can be made via PayPal or Stripe. Your payment details are transmitted directly to the respective provider, which processes them under its own responsibility. The legal basis is Art. 6(1)(b) GDPR.

• PayPal privacy statement
• Stripe privacy policy

We link to our Instagram profile. The photos shown on this website are stored on our own server; displaying them makes no connection to Instagram. Only when you click a link are you taken to Instagram (Meta Platforms Ireland Limited, Dublin, Ireland), whose privacy policy then applies.

• Instagram privacy policy

On the home page we show a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded if you have agreed in the cookie notice or clicked "Load map"; such a click applies to the current page view only. Until then, no connection to Google is made.

Once the map loads, your browser connects to Google's servers. At least your IP address and the page visited are transmitted, and Google may set cookies. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings" at the foot of the page.

The "View on Google Maps" button is a plain link. Only when you click it are you taken to Google Maps, whose privacy policy then applies.

• Google privacy policy

Unless a more specific period is given above, we keep your data only as long as it is needed for the purpose concerned. Booking and invoice data is kept for as long as tax and commercial law requires; in Italy this is generally ten years.

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on our legitimate interest (Art. 21 GDPR)
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)

An informal message to the email address above is enough. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy.

• Garante per la protezione dei dati personali

This website is served exclusively over encrypted HTTPS. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

We update this privacy policy when the website or the legal requirements change. The version published here always applies.