Privacy policy of the casabellezia.com website

1. Data controller

Lara Carola Spano, Via Gian Francesco Bellezia 8, 10122 Turin, Italy. Contact: via the site's contact form or the email address shown on the Contact page.

2. What data we process

a) Data you send us through the quote-request form: first name, last name, email, phone (optional), dates and number of guests, indicative arrival time and the text of your message.

b) Technical browsing data: IP address and technical information necessary for the operation and security of the site.

3. Why we process it and on what legal basis

a) To answer your request and prepare a quote: pre-contractual measures taken at your request (Art. 6.1.b GDPR). Providing the data marked as required is necessary for us to reply; without it we cannot prepare the quote.

b) To protect the site from abuse and spam: the controller's legitimate interest (Art. 6.1.f GDPR).

We do not use your data for marketing or profiling purposes, and we do not take automated decisions that concern you.

4. How long we keep it

• Requests not followed by a booking: 12 months from receipt, then deleted.
• If the request leads to a booking, the data flows into the management of the stay and is kept for the time required by legal obligations.
• IP address for anti-spam protection: at most 24 hours.

5. Who processes data on our behalf (data processors)

• Site hosting and contact form processing: Cloudflare, Inc. (United States), acting as data processor under its Data Processing Addendum.
• Sending and receiving requests (mailbox): Fastmail Pty Ltd (Australia), with data hosted in the European Union (Netherlands) and backup copies and logs in the United States.

Data is not disclosed or sold to third parties.

6. Transfers outside the European Union

The hosting provider (Cloudflare, United States) and the mailbox provider (Australia, with backup copies and logs in the United States) may process data outside the European Union. These transfers take place on the basis of the standard contractual clauses approved by the European Commission (Commission Implementing Decision (EU) 2021/914).

7. Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. We reply within one month. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Cookies

The site uses exclusively technical cookies and local storage, necessary for it to work (e.g. remembering the language you chose). We do not use profiling cookies or third-party analytics tools.