Privacy and cookies

Esta política está disponible en inglés. La versión de referencia es la italiana.

Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 08/11/2026. The Italian version prevails.

Data controller

Daniele Lutzu – email [email protected].

What data we process

Data you give us in a booking request or when writing to us: name, email, phone, dates of stay, number of guests and any message.
Payment data: the deposit is paid via PayPal or bank transfer. We never receive or store your card details; PayPal only tells us the outcome and amount.
Stay data: on arrival, guests' identity document details, collected only for the legal obligations below.
Technical data: IP address and browsing data automatically logged by the server and security services to run and protect the site.

Why and on what legal basis

To answer requests and manage the booking, deposit and stay: performance of a contract or pre-contractual steps (Art. 6.1.b GDPR).
To meet legal obligations: guest registration with the police authorities, statistical reports, tourist tax where applicable and tax obligations (Art. 6.1.c GDPR).
Website security and abuse prevention: legitimate interest (Art. 6.1.f GDPR).
Only with your separate consent, which you can withdraw at any time: offers for future stays.

How long we keep it

Requests not followed by a booking: 12 months.
Bookings and tax documents: 10 years, as required by law.
Technical browsing data: up to 12 months, unless needed to investigate abuse.

Who processes data on our behalf

Data is never sold or shared for marketing. It may be processed, only for these services, by: the provider of the server hosting the site; Cloudflare (content delivery and security); Google (email account used for communications); PayPal, an independent controller for payments. Some providers may transfer data outside the EU with the safeguards required by the GDPR (adequacy decisions or standard contractual clauses).

Cookies

This site uses technical cookies only, needed for it to work (for example, to log in to the private management area). We use no profiling cookies and no analytics that track visitors, so no consent is required.

Guide images come from Wikimedia Commons and, if not yet copied to our server, are loaded from there.

Your rights

You may at any time request access, rectification, erasure, restriction, objection and portability (Articles 15–22 GDPR) by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local authority.