1. Controller
The controller responsible for processing personal data on this website is:
Dr. Riccardo Giunta
Via Fratelli Cervi 15
61011 Gabicce Mare, Italy
Email: casacervi@t-online.de
No data protection officer has been appointed because, based on the current nature and scope of processing, there is no statutory obligation to appoint one.
2. General information
We process personal data only insofar as necessary to provide this website, respond to enquiries, handle direct bookings, process payments and comply with legal obligations. The principal legal bases are Article 6(1)(b), (c) and (f) GDPR; where consent is required, Article 6(1)(a) GDPR applies.
This website currently does not use our own analytics or marketing tools such as Google Analytics. External services are integrated only to the extent necessary for hosting, direct booking and, where applicable, payment.
3. Hosting by Netlify
This website is hosted by Netlify. When you access the site, technically necessary connection data may be processed, including the IP address, time of access, requested file or URL, referrer, browser type/version and operating system. This processing is used to provide the website securely, reliably and without technical errors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of the website. Where Netlify processes data on our behalf, this is carried out under a data-processing arrangement. International transfers may take place using the data-protection safeguards provided by Netlify.
Further information: Netlify Privacy Statement.
4. Direct bookings via Smoobu
To display availability and prices and to process direct bookings, this website integrates the booking system of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany.
When the booking system is loaded and used, your IP address and technical usage data may be transmitted to Smoobu. When you make a booking, the booking and contact data you enter are processed, for example your name, address, email address, telephone number, travel dates, number of guests, booking details and messages.
This processing is required to take steps prior to entering into and to perform the accommodation contract and is generally based on Article 6(1)(b) GDPR. Where data must be processed to comply with statutory registration, tax or retention obligations, Article 6(1)(c) GDPR applies. To the extent that Smoobu acts as our processor, Smoobu processes personal data under a data processing agreement pursuant to Article 28 GDPR.
Further information: Smoobu Privacy Policy.
5. Online payments / Stripe
If an online payment through Stripe is offered in the Smoobu booking system and you use it, the data required to process the payment are transmitted to Stripe. Depending on the transaction, these may include your name, contact and billing details, payment information, transaction data, IP address and fraud-prevention information.
Processing is carried out to execute your payment and perform the contract pursuant to Article 6(1)(b) GDPR and, where required, to comply with legal obligations pursuant to Article 6(1)(c) GDPR. Stripe may process certain data under its own responsibility for legally permitted purposes such as fraud prevention, security and regulatory compliance.
Further information: Stripe Privacy Policy.
6. Contact by email or telephone
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry. For enquiries relating to a booking or a possible stay, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in appropriate communication under Article 6(1)(f) GDPR.
7. Guest registration and legal obligations
For stays at Casa Cervi, Italian law may require us to collect identity and registration data of guests and transmit them to the competent authorities. Booking, tax and accounting data may also have to be retained to comply with statutory retention obligations. The legal basis is Article 6(1)(c) GDPR in conjunction with the applicable Italian rules.
8. Cookies and local storage
The website provided directly by us does not use our own analytics or marketing cookies. Technically necessary cookies or similar storage technologies may be used by the embedded Smoobu booking function and, where applicable, by the payment service where they are necessary to provide the booking or payment functionality you request.
If optional analytics, marketing or other non-essential technologies are added in the future, they will only be activated after any consent required by law has been obtained and this privacy notice will be updated accordingly.
9. External links
This website contains links to third-party services, for example Google Maps. Data are transmitted to the relevant provider only when you follow such a link. The provider of the external website is responsible for processing data there.
10. Recipients and international transfers
Personal data are disclosed only to recipients that need them for the stated purposes. These may include Smoobu, a payment provider such as Stripe, the hosting provider Netlify and public authorities where disclosure is legally required.
Where personal data are transferred outside the European Economic Area, appropriate safeguards under Chapter V GDPR are used where required, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.
11. Retention
We retain personal data only for as long as necessary for the relevant purpose. Booking and contractual data may be retained for longer where statutory tax, accounting or other retention obligations apply. Enquiries that do not lead to a booking are deleted once they have been finally dealt with and there is no legal or legitimate reason to retain them further.
12. Your rights
Subject to the GDPR, you have in particular the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)).
To exercise your rights, contact casacervi@t-online.de.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. For the accommodation located in Italy, you may in particular contact the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy. Further information: www.garanteprivacy.it.
14. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised alteration. The website is delivered over encrypted HTTPS. Complete protection of data transmitted by email cannot be guaranteed technically.
15. Updates to this privacy notice
We update this privacy notice if the website, the services used or legal requirements change. The version published on www.casacervi.de is the current version.