Introduction

• This section contains information about how the data controller Calore Marco manages the processing of user data on www.casanitaabano.it.
• This privacy policy is also valid for the purposes of Article 13 of EU Regulation 2016/679, for users who submit a request through the form Booking Request on the website casanitaabano.it, relating to the short-term tourist apartment "CasAnita" and for users browsing the site.
• This policy may be modified due to the introduction of new regulations; users are therefore invited to periodically consult this page.
• If the user is under 14 years of age, pursuant to Article 8(1) of EU Regulation 2016/679 and Article 2-quinquies of Legislative Decree 196/2003, as amended by Legislative Decree 181/2018, they must legitimize their consent through the authorization of their parents or legal guardians.

1. Data Controller

For this website casanitaabano.it, the data controller is Calore Marco

Email: [email protected]

Address: Via Calle Pace n.34 35031 Abano Terme (PD) Italy

The Controller manages the processing of personal data collected through the availability request form and the technical data of users browsing the site.

2. Types of Data Processed

• Personal data entered in the form: first name, last name, email, phone number, message text, arrival/departure dates, number of guests or notes.
• Some technical data is automatically collected during navigation by external providers such as Cloudflare, Vercel and Google Maps. This data is used for security (DDoS protection), hosting, performance and map display.

Technical logs automatically collected by hosting and security services (Cloudflare, Vercel) are retained for a variable period, according to their respective policies.

Viewing the map via Google Maps requires user consent, who can decide whether to load it by clicking the corresponding button.

3. Purposes of Processing and Legal Basis

a) Responding to user requests and providing availability information

Legal basis: Art. 6.1.b GDPR - pre-contractual measures requested by the data subject.

b) Legal and administrative obligations related to accommodation facilities / tourist rentals

Legal basis: Art. 6.1.c GDPR - legal obligation.

c) Technical management and website security

Users' technical data is processed to ensure the security, proper functioning and performance of the site.

Legal basis: Art. 6.1.f GDPR - legitimate interest of the controller.

4. Processing Methods

Processing is carried out using electronic and digital tools, with adequate security measures to protect personal data.

Data submitted through the form is sent via email to the Controller through Mailgun (Sinch). Mailgun processes data exclusively to send emails on behalf of the Controller and in accordance with GDPR.

Mailgun retains technical email logs (metadata) necessary for the operation of the service for a limited period, according to its Privacy Policy.

A Data Processing Agreement (DPA) has been signed between the Controller and Mailgun/Sinch.

5. Data Recipients

• Mailgun Technologies, Inc. - email delivery, extra-EU transfers via SCC.
• Cloudflare, Inc. - CDN, security, technical data collection.
• Vercel, Inc. - hosting/serverless, technical log collection.
• Google LLC - via Google Maps embed.
• Competent authorities in case of legal obligations.

6. Data Transfer Outside the EU

Mailgun, Cloudflare, Vercel and Google may transfer data outside the EU, regulated through Standard Contractual Clauses or according to their own policies. Policy links:

• Cloudflare
• Vercel
• Google

7. Data Retention Period

• Form data: retained in the Controller's email inbox until a deletion request is made, except for data necessary to fulfill legal obligations related to bookings.
• Technical navigation data: retained for the time strictly necessary to ensure the security and functionality of the site.

8. Data Subject Rights

Users may exercise at any time the rights provided by Articles 15-22 of the GDPR: access, rectification, erasure, restriction of processing, objection, portability.

Note: rights are limited for data necessary to fulfill legal obligations related to bookings.

To exercise these rights: [email protected]

9. Nature of Data Provision

Providing data in the form is necessary to be contacted and receive information. Automatically collected technical data serves the functioning and security of the site. There is no processing for marketing purposes.

10. Automated Decision-Making Processes

No automated decision-making or profiling is carried out.

11. Contacts

Email: [email protected]

Phone: 346 366 4899

12. Updates

This privacy policy may be modified at any time. Updated versions will be published on this page.