This Privacy Policy sets out how Casa Laudieri collects, uses, and protects personal data, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Italian Legislative Decree no. 196/2003 as amended.
The data controller is Ivo Paul Laudieri, operating as Casa Laudieri, Fallmerayerstraße 5, 39042 Brixen (BZ), Italy — P.IVA IT 03331770218.
Email ciao@casalaudieri.com
Enquiries submitted through this website: full name, email address, telephone number, intended dates of stay, number of guests, and any information voluntarily included in your message. Reservations: the above, together with a billing address and the identification data required by Italian law for the registration of guests with the State Police (“Schedina Alloggiati”). Payment data is collected and processed directly by our booking partner and is not stored on our servers. Technical data necessary for the operation of the website. Any analytics or comparable optional technologies are used only where you have given your consent, as described in our Cookie Policy.
To respond to enquiries and take steps at your request prior to entering into a contract — Art. 6(1)(b) GDPR.
To manage and perform your reservation — Art. 6(1)(b) GDPR.
To comply with legal obligations relating to guest registration, taxation, and accounting — Art. 6(1)(c) GDPR.
Where applicable, on the basis of your consent, which may be withdrawn at any time — Art. 6(1)(a) GDPR. Personal data is never sold or used for automated decision-making.
Enquiry correspondence is retained for 24 months. Reservation records and guest-registration data are retained for 10 years, as required by Italian tax and accounting law. Data processed on the basis of consent is retained until consent is withdrawn.
Personal data may be processed on our behalf by carefully selected service providers acting as data processors under Art. 28 GDPR: Smoobu GmbH (reservation management, including payment processing through its own providers), Vercel Inc. (website hosting, the serverless function that processes contact-form submissions, and privacy-friendly cookieless web analytics), and Resend, Inc. (delivery of enquiry emails). The interactive map is served by the OpenStreetMap Foundation. When a page with the map is opened, your IP address is transmitted to this provider so the map tiles can be delivered; this is necessary to display the map (Art. 6(1)(f) GDPR). Reservation data and contact-form submissions are processed within the European Economic Area; the contact-form function runs in Frankfurt, Germany. Email delivery of enquiries is handled by Resend, Inc. in the United States; this transfer is governed by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, in accordance with Chapter V GDPR. The contact form is protected from spam by Cloudflare Turnstile (Cloudflare, Inc.); its use is subject to Cloudflare's Turnstile Privacy Addendum. The website loads a small number of open-source code libraries from the unpkg content delivery network (Cloudflare, Inc.); when a page is opened, your IP address is transmitted to that network so the files can be delivered. This is technically necessary to display the site (Art. 6(1)(f) GDPR).
If you subscribe to our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR) to send you letters from the house a few times a year. We use a double opt-in process: you are added to our list only after confirming through a link we email you. The newsletter is delivered by Resend, Inc. You can unsubscribe at any time using the link at the foot of every newsletter, or by writing to letters@casalaudieri.com, and we will remove your address promptly. Withdrawing your consent does not affect the lawfulness of processing carried out before withdrawal.
Under Articles 15 to 22 GDPR you have the right to access your personal data and to obtain its rectification, erasure, or restriction, the right to data portability, and the right to object to processing. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise these rights, please write to ciao@casalaudieri.com.
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garante.privacy.it) or with the supervisory authority of your habitual residence.