What happens to your data

01 Who handles your data

The data controller is CASA COLELLA di Sabrina Cardellicchio Colella, based at Via Giuseppe Garibaldi 257, 73010 Porto Cesareo (LE), Italy, VAT number 05153690754.

For any request, write to villanoemi.portocesareo@gmail.com. We have not appointed a data protection officer: the business does not fall within the cases where that appointment is required.

02 What we collect, and how

This site has no database and sends nothing to a server of ours.

If you accept visitor statistics on the banner, Google Analytics records how the site is used: which pages you look at and for how long, which page you came from, your type of device and browser, and your approximate country and city. Your browser is recognised by a random code stored in a cookie, not by your name. If you refuse, none of this is recorded.

The “Check availability” form does not send anything by itself: it takes what you write and composes a ready-made WhatsApp message. Pressing the button opens WhatsApp, and it is you who decides whether to send it. Until you press send in there, the data stays on your device.

The form asks for:

• your name
• your email address
• your phone number
• arrival and departure dates
• the number of adults and children
• which accommodation interests you
• a free message, if you want to write one

03 Why we handle it

To answer your enquiry and prepare a possible stay. The legal basis is your enquiry itself, that is, steps taken at your request before entering into a contract: Article 6(1)(b) of European Regulation 2016/679. The tick box in the form is there to make it explicit that you have read this page.

To keep the site running and secure. The legal basis is our legitimate interest: Article 6(1)(f).

To count visits and understand how the site is used, with Google Analytics, only if you accept it. The legal basis is your consent: Article 6(1)(a). You can withdraw it whenever you like from “Cookie preferences” at the bottom of every page.

We do not profile you, we make no automated decisions about you, and we do not use your data for advertising.

04 Who receives it

Three parties, and they are named because you actually meet them:

We sell data to no one and we pass it on to no one for commercial purposes.

• WhatsApp, of Meta Platforms Ireland Ltd. When you press send, the message and the data in it reach WhatsApp and are handled under Meta’s terms, which we cannot change. If you would rather not go through WhatsApp, there is the phone and there is email.
• Vercel Inc., which hosts the site. Its servers record the technical data of every visit — IP address, date and time, page requested, browser type — as any web server does, in order to deliver the pages and to keep them secure.
• Google Ireland Limited, which provides Google Analytics, only if you accept visitor statistics. It receives the data described above and processes it to show us visit totals. The site asks Google not to use it for advertising and keeps Google Signals switched off, the feature that would link it to Google accounts. According to Google, Google Analytics does not log or store IP addresses.

05 Outside the European Union

Meta, Vercel and Google are United States groups and may handle data outside the European Union. All three state in their own terms that they base such transfers on the safeguards set out in Chapter V of the Regulation: adherence to the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission.

If that does not convince you, you can refuse visitor statistics — the site works just the same — and to write to us there are still the phone and email, which do not go through them.

06 How long we keep it

On the site, no time at all: it never receives it.

WhatsApp conversations and emails stay in the property’s accounts for as long as it takes to deal with your enquiry. If it turns into a booking, the data is kept for as long as tax obligations and the reports required by the public security authorities demand. Enquiries that do not become bookings are deleted within twelve months.

Visitor statistics: Google Analytics keeps the data tied to an individual browser for two months; after that only totals remain, which lead back to no one. The two cookies that recognise the browser last up to two years from your last visit, unless you delete them or withdraw your consent, in which case the site deletes them.

07 Your rights

At any time you may ask:

You may also withdraw your consent, without affecting what was done before. For visitor statistics, “Cookie preferences” at the bottom of every page is enough: from that moment nothing more goes to Google and its cookies are deleted. For everything else, write to villanoemi.portocesareo@gmail.com: we answer within one month. For data that sits inside WhatsApp, rights against Meta are exercised directly from WhatsApp.

• to know what data we hold and to obtain a copy of it
• to have it corrected
• to have it erased
• to restrict its use
• to object to the processing
• to receive it in a machine-readable format

08 If something is wrong

You may complain to the Italian data protection authority, Garante per la protezione dei dati personali, piazza Venezia 11, 00187 Rome, garanteprivacy.it. You may also go to court.

09 If this page changes

If anything changes we will update this page and the date at the top; if what we ask you on the banner changes, the banner will ask you again. What the site stores on your device is listed in the cookie policy.