Privacy policy

Last updated: 6 October 2026

This policy explains how we process the personal data of visitors to www.lacasinadanetta.it and of anyone who sends us a booking request, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

1. Data controller

Lodeto Maria Antonietta
Via Ettore Tagliaferro, 112/A – 72018 San Michele Salentino (BR), Italy
Email: [email protected] · Phone/WhatsApp: +39 389 12 77 437
Property: La Casina – CIN IT074014C200034242

2. What data we collect

• Booking request (form on the website): full name, country, email, mobile number (optional), dates of stay, number of adults and children, pets, requested sleeping arrangement (beds, baby cot), expected arrival time and flight number (optional), your message if any.
• Online check-in (optional, before arrival): for each guest surname, first name, sex, date and place of birth, citizenship and residence; for the head of the family or group also type, number and place of issue of the ID document. We do not ask for photos or copies of documents.
• Direct contact by email, phone or WhatsApp: the data you give us.
• Technical browsing data: IP address and browser information, recorded automatically by the systems that run the website, for security and to prevent abuse (e.g. repeated form submissions).

We do not ask for payment details on the website (online payments take place on Stripe's secure pages). The ID document is in any case checked in person on arrival, as required by Italian law.

3. Why we process it and legal basis

• Replying to your request, preparing a quote and managing the booking: pre-contractual and contractual measures taken at your request (Art. 6.1.b GDPR).
• Legal obligations: registration of guests with the police (Questura) through the Alloggiati Web portal (art. 109 T.U.L.P.S.), tourism statistics (ISTAT / Puglia Region), tourist tax, tax and accounting obligations (Art. 6.1.c GDPR).
• Website security and abuse prevention: legitimate interest of the controller (Art. 6.1.f GDPR).

Fields marked with * are required to reply to your request: without them we cannot follow up. We do not use your data for advertising or newsletters and we never sell it.

4. How long we keep it

• Requests that do not become a booking: as long as needed to handle them and in any case no longer than 24 months.
• Bookings: for the duration of the stay and then as long as required by tax and legal obligations (usually 10 years for accounting documents).
• Online check-in data: stored encrypted and deleted automatically at the end of the month following departure (the time needed for the police registration and statistics). They are not readable in the backup copies.
• Technical browsing data: a few days, unless needed to investigate abuse.

5. Where the data is and who processes it

The website and the booking system are hosted on a server owned by the controller, in Italy. The data is accessible only to the controller and to the people who help her manage the property. To run the website we use a few providers, who process data on our behalf or as independent controllers:

• Cloudflare, Inc.: network, protection and security certificate of the website (it sees visitors' IP addresses); it also serves the website icons (cdnjs).
• Google: email (Gmail) used to receive requests and reply to you; backup copies of the booking data (Google Drive); fonts (Google Fonts); map and Street View embedded in the page (Google Maps).
• Booking portals (Booking.com, VRBO): they only receive the dates when the house is occupied, not your data.

Some of these providers may transfer data outside the European Union (e.g. to the United States), with the safeguards provided by the GDPR (EU-US Data Privacy Framework and standard contractual clauses).

6. Cookies

The website does not use profiling cookies or analytics tools. It only uses technical browser storage, cleared when you close the tab, to remember whether you closed a promotion notice. Google's map and Street View, Google Fonts and the cdnjs icons are loaded from their providers' servers, which receive your IP address and may set their own cookies under their policies: Google, Cloudflare.

7. Your rights

You can ask at any time to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest and receive a copy of it (Arts. 15–22 GDPR) by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Changes

This policy may be updated; the date of the last change is shown at the top.