Privacy Policy

This website (“Casa Carmen”) processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian data protection law.

Data Controller

The Data Controller is:
Casa Carmen
Contact email: [your email]
Location: [City, Country]

Types of data collected

This website may collect the following personal data:

  • Contact details (such as name and email address) provided voluntarily through contact forms or email inquiries.

  • Technical and usage data (such as IP address, browser type, device information) collected automatically through cookies and server logs.

  • Data related to requests for information about the property.

This website does not process payment data. All bookings and payments are handled exclusively through the Airbnb platform, which acts as an independent Data Controller in accordance with its own Privacy Policy.

Purpose of processing

Personal data are processed for the following purposes:

  • To respond to requests and inquiries about Casa Carmen.

  • To provide information about availability and services.

  • To manage communication with guests.

  • To ensure the security and proper functioning of the website.

  • To comply with legal obligations.

Legal basis

Processing is based on:

  • The user’s consent.

  • Pre-contractual measures taken at the user’s request.

  • Compliance with legal obligations.

  • The legitimate interest of the Data Controller in managing and promoting the property.

Data retention

Personal data will be stored only for the time strictly necessary to fulfill the purposes for which they were collected and in accordance with legal requirements.

Data sharing and third parties

Personal data may be shared with:

  • Technical service providers (hosting, IT support, analytics) acting as Data Processors.

  • Public authorities where required by law.

The website may contain links or embedded content from third-party platforms (such as Airbnb, Google Maps, Vimeo, or social media), which may install their own cookies and process data according to their respective privacy policies.

User rights

Users may exercise the rights provided by Articles 15–22 of the GDPR, including:

  • Access to their data

  • Rectification or erasure

  • Restriction or objection to processing

  • Data portability

  • Withdrawal of consent at any time

Requests can be sent to the Data Controller using the contact details above.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Updates

This Privacy Policy may be updated. The latest version will always be published on this page.