Privacy and Cookie Policy
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and applicable national legislation
Last updated: October 2026
1. Data Controller and Contact Information
The Data Controller is Cà Giuel, with registered address at Via Battaini, 5 – 23023 Chiesa in Valmalenco (SO), Italy.
To exercise your rights or for any clarification regarding the processing of personal data, you can contact the Data Controller at the following details:
- Mailing address: Cà Giuel – Via Battaini, 5 – 23023 Chiesa in Valmalenco (SO) – Italy
- Privacy Email: cagiuel@gmail.com
- Phone: +39 0342 970092
- National Identification Code (CIN): IT014019B445AESRZG
2. Categories of Processed Data, Purposes, and Legal Bases
Personal data is collected directly from the user and processed for the following specific purposes:
| Purpose of Processing | Type of Data | Legal Basis (GDPR) |
|---|---|---|
| Inquiry and Quote Management: Responding to requests sent via contact form, email, or telephone. | First name, last name, email, phone number, stay dates, notes/preferences. | Performance of pre-contractual measures (Art. 6.1.b GDPR). |
| Booking and Stay Management: Conclusion and performance of the accommodation agreement. | Personal identification data, ID document details, payment/credit card details. | Performance of a contract (Art. 6.1.b GDPR). |
| Legal Compliance and Public Security: Communication of guest details to local police authorities (Alloggiati Web) and tax/accounting compliance. | Personal details, identity document details, billing data/VAT number. | Legal obligation (Art. 6.1.c GDPR; T.U.L.P.S. art. 109). |
| Direct Marketing and Newsletter: Sending promotional offers, updates, and tourist information. | Name, email address. | Explicit and optional consent of the data subject (Art. 6.1.a GDPR). |
| Website Security and Fraud Prevention: Monitoring the proper functioning of the web infrastructure. | IP addresses, system logs, browsing data, browser type. | Legitimate interest of the Data Controller (Art. 6.1.f GDPR). |
3. Data Retention Period
The data collected will be stored only for the time strictly necessary to fulfill the purposes for which it was collected:
- Contractual, administrative, and accounting data: Retained for 10 years to comply with tax and legal obligations.
- Guest registration data (Alloggiati Web): Deleted immediately after electronic transmission or stored according to regulatory authority provisions.
- Contact/Inquiry data not followed by a booking: Retained for a maximum of 24 months from the request date.
- Marketing/Newsletter data: Retained until consent is revoked (opt-out) by the user or for a maximum of 24 months from the last active contact.
4. Data Recipients and International Transfers
Collected data will never be disseminated and may only be disclosed to authorized third parties or designated Data Processors (pursuant to Art. 28 GDPR):
- Technical service providers, web hosting providers, booking engine providers, and web developers;
- Tax, administrative, and legal consulting firms;
- Public Security and Financial Administration Authorities for statutory requirements.
Data is processed within the European Economic Area (EEA). If service provision requires data transfer outside the EEA (e.g., newsletter tools, cloud services), it will occur strictly to countries deemed adequate by the European Commission or subject to Standard Contractual Clauses (SCCs) approved by the Commission.
5. Cookie Policy and Platform List
Cookies are small text files sent to the user’s terminal by visited websites. In accordance with the Italian Data Protection Authority Guidelines of June 10, 2021, this website uses the following categories of cookies:
A. Technical Cookies (Necessary)
These do not require prior user consent as they are essential to enable website navigation and access core functionalities (e.g., session management, saving cookie consent preferences, booking engine functions).
B. Analytical and Statistical Cookies
The site utilizes tools such as Google Analytics 4 with IP address masking/anonymization. Since direct identification is prevented, they are treated as technical cookies.
C. Third-Party and Profiling Cookies (Prior Consent Required)
These tools are activated only if the user explicitly consents via the cookie consent banner:
- Google Maps: To display the interactive location map of the property in Chiesa in Valmalenco.
- Social Widgets / YouTube: To embed multimedia content.
Managing Preferences: Users can review or change their consent preferences at any time by clicking the “Manage Cookie Preferences” link in the footer or by configuring their web browser directly (Chrome, Firefox, Safari, Edge).
6. Rights of the Data Subject (Arts. 15-22 GDPR)
As a data subject, you are guaranteed all rights under the EU General Data Protection Regulation, which you can exercise free of charge at any time:
- Right of Access (Art. 15): Obtain confirmation of whether your personal data is being processed and receive a copy.
- Right to Rectification (Art. 16): Obtain correction of inaccurate data or completion of incomplete data.
- Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your personal data where provided for by law.
- Right to Restriction of Processing (Art. 18): Obtain temporary restriction of processing under certain conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): Object at any time to processing based on legitimate interest or for direct marketing purposes.
- Withdrawal of Consent: Withdraw previously given consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you may send a formal request to: cagiuel@gmail.com.
Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it) if you believe the processing violates applicable laws.