Privacy Policy

The Data Controller is Luca De Salve, residing at Via San Tommaso d'Aquino 83 – 73052 Parabita (LE), Italy, who manages the holiday home business called "Casa delle Ginestre", not organized as a corporate entity.

Contact email: booking@lacasadelleginestre.it

As of the update date of this policy, no Data Protection Officer (DPO) has been appointed, as the requirements under Article 37 GDPR are not met.

The following data may be processed:

• Identification and contact data (name, email, phone number);
• Data related to stay requests (dates, number of guests, messages sent);
• Technical browsing data (IP address, technical logs, user agent, session data);
• Any additional information voluntarily provided by the user.

Personal data is processed for the following purposes:

• Respond to availability and information requests;
• Manage pre-contractual and contractual communications related to stays;
• Fulfill legal, tax, and administrative obligations;
• Protect the controller's rights in extrajudicial or judicial proceedings;
• Ensure the security and proper functioning of the site.

No direct marketing activities are conducted without specific consent.

The legal bases are:

• Execution of pre-contractual or contractual measures requested by the data subject (Article 6, paragraph 1, letter b GDPR);
• Fulfillment of legal obligations (Article 6, paragraph 1, letter c GDPR);
• Legitimate interest of the controller in site security and request management (Article 6, paragraph 1, letter f GDPR);
• Consent of the data subject, where required (e.g., for non-technical cookies).

Processing is carried out using IT and electronic tools, with adequate security measures to prevent unauthorized access, loss, or unlawful use of data.

Data is retained for the time strictly necessary for the indicated purposes and, in particular:

• Information requests: up to 12 months from the last contact;
• Contractual, tax, and administrative data: for the terms required by current regulations (generally 10 years);
• Technical logs: for a period proportionate to security and maintenance needs.

At the end of the retention period, data is deleted or anonymized.

Data may be processed by technical service providers appointed as Data Processors pursuant to Article 28 GDPR, including:

• Hosting and site infrastructure services;
• Brevo, used for sending email communications via SMTP.

Any data transfers to countries outside the EEA occur in compliance with the safeguards provided by GDPR (e.g., standard contractual clauses).

Data is not subject to disclosure.

The data subject may exercise the rights provided by Articles 15–22 GDPR, including:

• right of access;
• rectification;
• erasure;
• restriction of processing;
• objection;
• portability (where applicable);
• withdrawal of consent given.

The right to lodge a complaint with the Italian Data Protection Authority remains unaffected.

To exercise rights or request updated information:
booking@lacasadelleginestre.it

For information on cookies, please see our Cookie Policy.