Privacy policy

1. Data controller

The data controller is Iwan Donateo, host of the tourist accommodation “Loft Casa Matteotti”, Poggio Mirteto (RI), Italy — CIN IT057053C2X9OIK5UN, CIR 057053-LOC-00003.

For any privacy question, write to iwandonateo@hotmail.com or call +39 329 267 5324.

2. What data we process

• Browsing data: IP address, browser and device type, pages visited, date and time. These are collected automatically by the servers hosting the website, for its operation and security.
• Data you send us: first and last name, phone, email, dates of stay, number of guests and your message, when you contact us via WhatsApp, email or phone.
• Stay data: if you book, the data needed for the booking and the guests' identity-document details required by law on arrival.

3. The WhatsApp message with your dates

The calendar does not store any data on the website: it prepares a message with your dates and number of guests on your device and opens it in WhatsApp. We only receive the data when you press “send” in the app. From then on, it is also processed by WhatsApp (Meta) or your email provider under their own privacy policies.

4. Why we process data and on what legal basis

• Answering your enquiries and preparing a quote — pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Managing your booking and stay — performance of a contract (Art. 6(1)(b) GDPR).
• Complying with legal obligations: reporting guest details to the police via the Alloggiati Web portal (Art. 109 TULPS), regional/ISTAT tourism statistics, tourist tax where applicable, tax and accounting obligations (Art. 6(1)(c) GDPR).
• Keeping the website working and secure — legitimate interest of the controller (Art. 6(1)(f) GDPR).

We never sell your data. Only if you consent to “Marketing” cookies do we use the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram (see section 8 and the Cookie policy).

5. How long we keep data

• Enquiries and quotes not followed by a booking: as long as needed to reply, and no longer than 12 months.
• Booking data and tax records: 10 years, as required by tax law.
• Data sent to Alloggiati Web: we keep no copies beyond what the law requires.
• Browsing data: for the technical period set by the hosting provider (usually a few days or weeks).

6. Who may receive the data

• Vercel Inc. (website hosting provider), which processes browsing data as a data processor.
• Public authorities when required by law (police, Region/ISTAT, Municipality, Revenue Agency).
• Our accountant and advisers, for tax compliance.
• Platforms you choose: if you book via Booking.com or Airbnb, or message us on WhatsApp, these companies process your data as independent controllers under their own policies.

7. Transfers outside the European Union

Some providers (Vercel, Meta/WhatsApp, Google) may process data in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework adequacy decision or on the Standard Contractual Clauses approved by the European Commission.

8. Map and external content

The Google Maps map in the “Location” section of the home page only loads if you activate it with a click. From that moment Google may collect data such as your IP address and use cookies. The Meta Pixel (Meta Platforms Ireland Ltd.) only activates if you accept “Marketing” cookies in the banner: it measures visits and clicks on WhatsApp, Booking.com, Airbnb and the quote request, also to show you our ads on Facebook and Instagram. You can withdraw consent at any time via “Cookie settings”. See the Cookie policy for details.

9. Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing, data portability, or object to processing (Arts. 15–22 GDPR) by writing to iwandonateo@hotmail.com. We will reply within 30 days.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

10. Is providing data mandatory?

Providing data for a quote or booking is optional, but without it we cannot reply or host you. Identity-document details are required by law in order to stay at the property.

11. Changes

We may update this policy. The date of the last update is shown at the bottom of the page.