Privacy notice

This notice explains how Casa Camelia collects and uses the personal data of people who visit the site, contact us or book a stay, in accordance with the European General Data Protection Regulation (GDPR).

Who handles your data

What data we collect, and why

When you contact us

If you write to us through the contact form we collect the data you enter, that is first name, surname, email address and the content of your message, in order to reply to your request.

When you book a stay

To manage the booking we collect the dates of the stay, the number of guests, the ages of any children, the identifying and contact details of the person booking, the country of origin and any notes entered in the form.

The ages of children are used to calculate the price of the stay correctly. You may also tell us, optionally, whether you are travelling with a pet and how you would prefer the beds to be made up.

When you make a payment

Card payments are handled by Stripe. Card details are entered into the provider's system and are not stored by Casa Camelia. We receive the information needed to verify the payment and manage the booking.

When the stay is confirmed

We collect and use the data needed to organise the stay and to meet our legal obligations, including reporting guests' details to the competent authorities, tourist tax requirements and the handling of tax and accounting records.

When you visit the site

To ensure the site works and stays secure, the server may record technical data such as the IP address, the date and time of the connection and the page requested.

When you subscribe to the newsletter

We collect your email address, your first name if you enter it (it is optional) and the language of the site you subscribe from, to send you a few times a year seasonal tips, offers and availability. Your subscription is only valid after you click the confirmation link we email you. Every newsletter contains a link to unsubscribe. The service that sends the newsletters records whether you open them and which links you click, to give us statistics on each campaign.

Visit statistics

To understand how the site is used we count visits with Umami, installed on our own server, which uses no cookies and does not keep your IP address. Only if you agree do we also use Google Analytics 4. The details are in the cookie policy.

The legal basis for processing

• Enquiries and bookings: handling requests and taking pre-contractual steps, or performance of the accommodation contract.
• Payments and tax records: performance of the contract and compliance with legal obligations.
• Site security and technical handling of requests: the controller's legitimate interest in protecting the site and keeping the services working properly.
• Newsletter: your consent, given when you subscribe and confirmed through the link in the email. You can withdraw it at any time with the link at the bottom of every newsletter or by writing to us.
• Cookieless statistics (Umami): the controller's legitimate interest in understanding how the site is used, with aggregate data that cannot identify you.
• Google Analytics statistics: your consent, which you can withdraw at any time with the "Cookie preferences" button at the bottom of every page.

Where processing is based on legitimate interest, you may object in the cases and by the means provided for by law.

Cookies

The site uses technical cookies, needed for it to work and to keep payments secure, and, only with your consent, Google Analytics statistics cookies. We use no advertising or profiling cookies. The full list and how to change your choice are in the cookie policy.

Who may receive your data

To run the site, our communications and the bookings we use the following providers:

• Hetzner Online GmbH, a German company: hosts the site.
• Purelymail: email service.
• Stripe Payments Europe, Ltd.: payment service.
• Sendinblue SAS (Brevo), a French company: sending the newsletter.
• Google Ireland Limited: visit statistics with Google Analytics, only with your consent.
• The accountant appointed by us, for tax and accounting purposes.

Data may also be disclosed to public authorities where required by law, for example for guest registration obligations and tourism statistics.

Providers process the data according to their respective roles and, where applicable, under agreements governing the processing of personal data.

Transfers outside the European Union

The email service may involve the processing and storage of messages in the United States. Some processing by payment providers or other services may also involve international transfers.

If you consent to Google Analytics, the data collected may be transferred to Google LLC in the United States, which participates in the EU-U.S. Data Privacy Framework.

Such transfers take place in compliance with the conditions and safeguards required by the GDPR. For information on the safeguards applying to individual providers, please write to us at the email address above.

How long we keep your data

We keep data for as long as necessary for the purposes for which it was collected and in compliance with legal obligations.

• Enquiries that do not become a booking: for the period needed to handle the request and any follow-up correspondence.
• Bookings and tax records: for the periods required by law.
• Data relating to public security obligations: according to the rules governing those obligations and the records of the competent authorities.
• Server technical logs: for the period needed to ensure security and identify technical problems.
• Newsletter: as long as you remain subscribed. If you unsubscribe we keep only your address in the list of people who do not want to receive anything, so we never write to you again by mistake.
• Google Analytics statistics: 14 months, after which Google deletes them automatically.

Your rights

At any time you may contact us to request, in the cases provided for by law:

• access to your personal data;
• correction of inaccurate data;
• erasure of your data;
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability, where applicable.

You may also lodge a complaint with the Italian data protection authority.

To exercise your rights, write to welcome@casacamelialakemaggiore.it. We will reply within the time limits set by law.

Changes to this notice

This notice may be updated if the site or the way data is processed changes. The updated version will be published on this page with its date.

This page was written in Italian. This translation is provided to help you understand it; in case of any discrepancy, the Italian version prevails.

Last updated: 21 October 2026