Privacy Policy

Data controller

The data controller is Simona Cupparoni, Via Castelboccione, 61029 Urbino (PU), Italy — bbcastelboccione@gmail.com.

What data we process

Browsing data: as with any website, the technical hosting provider may automatically record data needed for the service to work and stay secure, such as IP address, date and time of the request, requested page, technical logs and information about the browser and device.

The "Check availability" form does not send data to a server: it builds the message on your device and opens WhatsApp. We also process the data you choose to send us via WhatsApp, email or phone (for example your name, contact details, chosen house, dates of stay, number of guests and any information you include in the notes).

Website hosting

The website is hosted by a technical hosting provider (Vercel Inc.), which processes browsing data as a data processor on behalf of the controller, solely to provide the service and keep it secure. The legal basis is the controller's legitimate interest in the secure operation of the website (Art. 6.1.f GDPR). Technical logs are kept for the period set by the provider for security purposes. If the provider processes data outside the European Union, the transfer is based on the safeguards provided by the GDPR (Art. 44 et seq.).

Purposes and legal basis

Data is processed to answer requests for information and availability and, if you book, to manage your stay and meet legal obligations (for example registering guests with the police authorities and the local tourist tax).

The legal basis is the performance of pre-contractual and contractual measures requested by you (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

Video surveillance of outdoor areas

The outdoor areas of the property are covered by video surveillance cameras, with signs on site. There are no cameras inside the apartments.

Images are used solely for the safety of people and the protection of the property, on the basis of the controller’s legitimate interest (Art. 6.1.f GDPR), and are not disclosed.

To find out how long images are kept, please write to bbcastelboccione@gmail.com.

Third-party services

WhatsApp conversations are handled by WhatsApp Ireland Limited under its own privacy policy. The map on the website is provided by Google Ireland Limited (Google Maps) and is only loaded with your consent: see the Cookie Policy. The fonts are hosted on the website itself and are not downloaded from external services.

Retention

Data from requests that do not lead to a stay is kept only as long as needed to reply, and no longer than 12 months. Data relating to stays is kept for the period required by tax and public security regulations.

Disclosure of data

Data is not sold or shared. It may only be disclosed to the competent authorities where required by law and to advisers (for example our accountant) for mandatory obligations.

Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, or object to processing, by writing to bbcastelboccione@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).