Data controller
Fabio Panico · info@cortehouse.it
What data we process
- Browsing the website: the public website uses no profiling cookies or analytics tools. The hosting provider may record technical data (such as IP address and request time) in security logs.
- Availability checks: the calendar only sends the selected dates and number of guests to the server, without personal data; this information is not stored.
- WhatsApp requests: when you message us, we process your name, phone number and message content to reply to your request. WhatsApp is a Meta service, which processes data under its own privacy policy.
- Bookings: the main guest’s full name, contact details, language, dates, number of guests, pets, amounts and bank transfer status, agreed times and any operational notes.
- Guest registration: on arrival we ask for guests’ ID documents for the mandatory notification to the Italian police authorities (art. 109 TULPS).
Purposes and legal bases
- Replying to requests and managing bookings: pre-contractual measures and performance of a contract (art. 6.1.b GDPR).
- Legal, tax and public-safety obligations: legal obligation (art. 6.1.c GDPR).
- Security of the website and management system: legitimate interest (art. 6.1.f GDPR).
Retention
Booking data is kept for as long as needed to manage the stay and meet legal obligations, then deleted or anonymised. [Retention periods to be defined with the privacy consultant.]
Recipients
Data is only accessible to the people authorised to manage Corte House and to technical providers (hosting and database) acting as data processors. We never sell or share data with third parties.
Your rights
You can request access, rectification, erasure, restriction or portability of your data and object to processing at any time (arts. 15–22 GDPR) by writing to the controller. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).