1. Data controller
The processing of data connected with this website is carried out by the operator of Dimora di Charme Rooms & Apartments, with operational address at Località Broglie 15/C, 37019 Peschiera del Garda (VR), Italy.
2. Data that may be processed
Browsing data
The IT systems and software procedures used to operate this website may, in the course of their normal operation, collect technical data whose transmission is inherent in the use of Internet protocols, such as IP address, date and time of the request, requested page, browser and operating system, device information, request outcome and technical data used for security and diagnostics.
Data provided voluntarily
When you contact the property by phone, email or WhatsApp, you may provide your name, contact details, stay dates, number of guests, preferred accommodation, special requests and any other information you choose to include in your message.
The “Check availability” form on this website does not send data to a website database: it prepares a message and opens WhatsApp when you choose to send it. Your data is therefore transmitted to WhatsApp only when you continue on that platform.
Third-party content
Room and property photographs are hosted directly with the website files and do not require connections to booking platforms or third-party image CDNs. The page also embeds Google Maps; when the iframe loads, your browser connects to Google systems and technical data, including your IP address, may be transmitted.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Allow use of the website and ensure security, integrity and proper operation | Technical browsing data | Legitimate interest of the controller in secure website management, Art. 6(1)(f) GDPR |
| Respond to requests for information, availability, quotations and pre-contractual enquiries | Data provided voluntarily | Steps taken at the request of the data subject prior to entering into a contract, Art. 6(1)(b) GDPR |
| Manage any booking, stay, administrative and tax requirements and legal obligations | Necessary identification and contact data | Performance of a contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR |
| Display the property location through Google Maps | Technical data transmitted to Google through embedded content | Google Maps is an embedded third-party service; processing by Google is described in this policy and in the provider’s own privacy information |
In the delivered configuration, the website does not use analytics, behavioural advertising or profiling tools.
4. Nature of data provision
Simply browsing the website involves processing the technical data required for navigation. Providing data by email, phone or WhatsApp is optional, but may be necessary to receive a reply or an accommodation proposal. The area section includes Google Maps embedded directly in the page.
5. Recipients and persons who may process data
Data may be processed, strictly to the extent necessary, by parties supporting the property in technical and administrative management, including:
- hosting providers and technical website maintenance providers;
- email providers and communication services chosen by the user;
- WhatsApp/Meta when the user uses the WhatsApp link;
- Google, solely in connection with Google Maps embedded on the website;
- professionals and advisers supporting the property where necessary;
- public authorities or other parties where disclosure is required by law.
When you follow links to Instagram, Facebook, Google or other external sites, processing on those platforms is governed by their respective privacy policies.
6. Transfers of data outside the EEA
Use of international services such as Google Maps and WhatsApp may involve data processing outside the European Economic Area. Where applicable, these providers state that they use GDPR-compliant transfer mechanisms, such as adequacy decisions or standard contractual clauses.
For more details, please see the providers’ privacy information: Google Privacy and WhatsApp Privacy Policy.
7. Retention periods
- Technical data and logs: for the time strictly necessary for operation, security and diagnostics, in line with the hosting provider’s policies, unless longer retention is required due to anomalies, abuse or legal obligations.
- Information requests not followed by a booking: normally up to 12 months after the last communication, unless longer retention is required to protect a legal right or at the data subject’s request where compatible with applicable obligations.
- Stay-related and accounting/administrative data: for the periods required by applicable law; accounting documentation may be retained for up to 10 years where required by law.
8. Data-subject rights
Where provided for by the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability and may object to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.
Requests may be sent to centroesteticaeva@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority.
9. Security and automated decision-making
The property adopts organisational and technical measures proportionate to the nature of the data processed and the associated risks. The website does not carry out automated decision-making that produces legal effects or similarly significant effects on users.
10. Data relating to minors
The website is not designed to collect data directly from minors. Any information relating to minors that is needed for the stay must be provided by a parent, guardian or another authorised adult and will be processed only for purposes connected with the booking and applicable obligations.
11. Updates to this policy
This Privacy Policy may be updated if the website services, providers used or applicable law change. The date of the latest update is shown at the top of the page.
← Back to the website