Privacy Policy

Privacy Policy

Pursuant to Regulation (EU) 2016/679 – GDPR

1. Data Controller

Manlio Migliorini
Via Dante 56
19015 Levanto (SP) – Italy
VAT Number: 01418320113
Tax Code: MGLMNL82R19D969R
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
PEC: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Types of Data Collected

  • First and last name
  • Email address
  • Phone number
  • IP address
  • Technical cookies

No identity documents or payment card details are collected directly by the Website.

3. Purpose of Data Processing

  • Managing accommodation bookings
  • Responding to booking requests
  • Providing customer support
  • Technical website management and security

4. Legal Basis

Processing is based on:

  • Performance of a contract (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Legitimate interest in website security (Art. 6(1)(f) GDPR)

5. Payment Processing

Online payments are handled exclusively through PayPal. The Website does not access or store credit card details.

In the future, additional payment providers such as Stripe may be implemented. In such case, payment data will be processed directly by the selected provider under its own privacy policy.

6. Analytics and Third-Party Services

The Website uses Google Analytics for statistical purposes. Data may be processed outside the European Union in accordance with GDPR safeguards.

Future marketing tools such as Meta (Facebook/Instagram) Pixel may be implemented. If activated, users will be informed through the Cookie Policy and consent mechanisms.

7. Data Retention

Personal data related to bookings is retained only for the time strictly necessary to manage the reservation and will be deleted after check-out.

Data required for tax and accounting purposes will be retained in accordance with applicable Italian law.

8. Data Transfers Outside the EU

Some providers such as PayPal and Google may process data outside the EU. Such transfers occur in accordance with GDPR safeguards, including Standard Contractual Clauses.

9. Data Security

Appropriate technical and organizational measures are adopted, including SSL encryption and secure hosting infrastructure.

10. Data Subject Rights

Users have the right to access, rectify, erase, restrict processing, object, request portability, and lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to: This email address is being protected from spambots. You need JavaScript enabled to view it.

11. Minors

Bookings are accepted only from individuals aged 18 or older.

12. Updates

This Privacy Policy may be updated at any time.