1. Data controller

The data controller is Fabrizio Franza, with registered office at Viale dei Quattro Venti 150, 00152 Rome, Italy. For any privacy request you can write to fabrizio.franza@libero.it or call +39 347 849 4957.

2. What data we collect and why

We only collect the data needed for the site’s features.

• Booking request: first and last name, email, phone (optional), chosen property, dates, number of guests and message. We use them to reply to you and to manage your stay.
• Review: name, property, rating and text. They are published on the site only after we approve them and only if you have given your consent.
• Direct contact: the data you send us when you write to us by email, phone or WhatsApp, used to reply to you.
• Site security: to limit repeated form submissions, the site keeps for about an hour a scrambled (encoded) version of your IP address. The hosting provider also keeps technical server access logs.
• Data required by law on arrival: for accommodation businesses the law requires collecting guests’ data and communicating it to the public security authorities.

We also process the following data:

• Reply to your request: if we confirm or decline your booking, we write to the address you gave us, using the name, dates and property from your request and any personal message.
• Preferences on your device: the site remembers, in your browser, whether you have turned off the music or the page-turn sound. This information stays on your device and is not sent to us.
• Backups: the site is copied periodically for security. The copies also contain request data and are replaced after 7 days.

We do not sell your data and we do not use it for advertising or profiling.

3. Legal basis and retention

We process data on these grounds under the European Regulation (GDPR):

• Booking request and contract: needed to reply to your request and to manage your stay (art. 6.1.b).
• Reviews: your consent, which you can withdraw at any time (art. 6.1.a).
• Legal obligations: communications to the authorities and tax obligations (art. 6.1.c).
• Site security: our interest in protecting the site from abuse (art. 6.1.f).

We keep data for as long as needed:

• requests that do not become a booking: 6 months from the request;
• completed bookings: for the periods required by accounting and tax obligations (normally 10 years);
• reviews: as long as the site shows them or until you ask us to remove them;
• encoded IP address: about one hour.

4. Who we share data with

Data is processed by us and by the providers that make the site work:

• Aruba, which hosts the site, the data, the backups and the mailbox the site uses to send emails, as data processor.
• The email service we use to receive requests: Google.
• Public authorities, when the law requires it (for example the public security authorities for guests, or the tax administration).
• Google Fonts: the pages load fonts from Google’s servers, which therefore receives your IP address.

YouTube videos (Google): the videos on the site load only if you press Play. In that case YouTube, which belongs to Google, receives some browsing data and may use its own cookies. Until you press Play, the site does not contact YouTube.

External sites: the site contains links to Booking.com, Airbnb and social networks. When you open them, their own privacy notices apply.

Google Search Console: we use this Google tool to see how the site appears in search results. It installs nothing on your pages and does not collect visitors’ data.

Transfers outside the European Union: some providers, such as Google, may process data outside the European Union, with the safeguards provided by law.

5. Your rights and how to exercise them

You can ask us at any time to access your data, correct it, delete it, restrict its use or receive it in a computer-readable format. You can also object to the processing and withdraw any consent you have given, for example for a review.

Write to fabrizio.franza@libero.it: we will reply within one month. If you believe your data is not being processed correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

6. Cookies

The site does not use profiling cookies or analytics or advertising tools. If in future we enable statistics, advertising or other third-party tools, this section and a cookie notice will be updated.

WordPress may use technical cookies needed for the site to work, for example for people who log in to the administration area. These cookies do not require the visitor’s consent.

The site saves on your device, in your browser, only your choice about music and the page-turn sound: it is not a tracking cookie, it stays on your device and is not sent to us.

YouTube videos load only if you press Play: in that case YouTube may use its own cookies, as explained in section 4.