Privacy Policy
Notice under articles 13-14 of Regulation (EU) 2016/679 (GDPR) — Last updated: June 10, 2026
Data Controller
Sergio Allevato, manager of the «Dimora nel Bosco» property
Via Cesare Curcio, Vico 1, 26 — 87050 Lorica (CS), Italy
CIN (Italian National Identification Code): IT078119C2Z8CFXO8M — CIR: 078119-AAT-00026
Email: info@dimoranelbosco.it —
Phone: +39 328 4810475
What data we process, why, and for how long
- Contact form: name, email, phone (optional), stay dates, number of guests, message. Purpose: answering your request and preparing a quote. Legal basis: GDPR art. 6.1.b (pre-contractual measures taken at your request). Together with the request we record your IP address and user agent (security and abuse prevention) and the source of your visit with its session identifier (referrer/UTM, to know which channel the request came from) — art. 6.1.f, legitimate interest, with the right to object. Retention: 24 months from submission, then automatic deletion.
- First-party statistics: visited page, traffic source (referrer/UTM), random session identifier (UUID in localStorage, 24-hour expiry, not linked to your identity), browser and operating system family (never the full user agent string) and IP address masked before being recorded (for IPv4 the last octet is zeroed: we never store your full IP for statistics). Purpose: aggregate site-usage statistics, with no profiling and no sharing with third parties. Legal basis: art. 6.1.f (legitimate interest). Retention: 13 months, then automatic deletion.
- Transactional emails: when your request is received we send a confirmation to your address and an internal notification to the manager through the provider Resend Inc. (USA). Only the data necessary for delivery is transmitted. Legal basis: art. 6.1.b.
- Google Maps embed: the map iframe loads only after your click to activate it; from that moment Google LLC may process browsing data under its own privacy policy. Legal basis: art. 6.1.a (consent), revocable at any time from the Cookie Policy.
- Stay data: if you book, on arrival guests' identity documents are reported to the Alloggiati Web portal of the Italian State Police, as required by art. 109 of the Italian TULPS. Legal basis: art. 6.1.c (legal obligation).
Cookies and storage tools
The site only uses technical cookies and first-party tools, with no profiling. Fonts are hosted on our own servers (no request is sent to Google Fonts). The full list, durations and how to revoke preferences are in the Cookie Policy.
Recipients and transfers outside the EU
Data is processed through providers acting as processors under GDPR art. 28: Cloudflare Inc. (site and database hosting — possible transfer outside the EU under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses) and Resend Inc. (email delivery — USA, DPF/SCC). Google LLC processes data only if you activate the map. Data is never sold or shared for third-party marketing purposes.
Provision of data
Providing data in the form is necessary to answer your request: without name, email and message we cannot get back to you. Optional fields are up to you. No automated decision-making or profiling is carried out.
Your rights
You can exercise at any time the rights under GDPR articles 15-22 (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) by writing to info@dimoranelbosco.it. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Changes
This notice may be updated: the date at the top of the page applies.