Privacy notice

1. Scope

This notice covers quattrodimore.it, the pages for the four properties, the indicative availability calendar and links used to start a conversation by WhatsApp, email or Booking.com.

When you leave the website and use an external service, processing is also governed by that provider’s privacy notice and terms.

2. Data processed automatically

The hosting provider may record technical data needed to deliver and protect the website, including IP address, date and time, requested page, user agent, request result and diagnostic information. The website does not use this data for profiling or advertising.

The calendar reads a technical availability file and does not require a visitor’s name, email address or other identifying information.

3. Data you provide

If you contact us by WhatsApp or email, we may receive your name, contact details, requested dates, number of guests, preferred property or room and any information you choose to include.

This data is used to reply, check availability, prepare a proposal and take pre-contractual steps at your request. A message generated by the website is not a booking and does not involve payment.

4. Purposes and legal bases

Data is processed only for specified purposes that are compatible with the service requested.

• replying to enquiries and taking pre-contractual steps at the data subject’s request (Article 6(1)(b) GDPR);
• protecting the security and continuity of the website on the basis of the controller’s legitimate interests (Article 6(1)(f) GDPR);
• meeting administrative, tax or legal obligations if an accommodation relationship is established (Article 6(1)(c) GDPR).

5. Recipients and external services

Data may be processed by technical providers acting for the controller where necessary, including hosting, email and communication services. WhatsApp is provided by Meta; Booking.com, Google Maps and OpenStreetMap are separate external services reached only through a link or an explicit user action.

Embedded OpenStreetMap maps load only after the dedicated command is selected. The map provider may then receive technical data, including the IP address.

6. Transfers outside the EEA

Some international providers may process data outside the European Economic Area. Where the controller is responsible for the transfer, it must rely on an adequacy decision, standard contractual clauses or another GDPR safeguard. Services used directly by the visitor are also governed by their providers’ notices.

7. Retention

Technical logs are retained by the hosting provider for as long as needed for security and operation. Conversations concerning an enquiry are kept for the time needed to reply and for any necessary follow-up. If an enquiry becomes a booking, data may be kept longer to meet contractual, administrative, tax and public-security duties.

8. Your rights

You may request access, rectification, erasure, restriction, data portability where applicable and object to processing. You may also lodge a complaint with the Italian Data Protection Authority. Use the controller’s email address to exercise your rights.

9. Children and updates

The website is not designed to intentionally collect children’s data. Any data needed for a booking must be supplied by a parent, guardian or authorised adult.

This notice is updated when services, providers or processing practices change. The date above identifies the published version.