This notice explains how personal data is processed when visiting the Berretta Rossa Private Residence website, voluntarily sending communications by email and using external services and links.
Data controllers
Personal data relating to enquiries, bookings and the management of stays is jointly processed by Alessandra Govoni and Caini Alessandro, who may be contacted at appartamento.berrettarossa@gmail.com. The Controllers jointly determine the essential purposes and means of processing. Privacy-related requests may be sent to the same address.
Technical website management
The technical management, design and maintenance of the website are entrusted to Stella Catucci, who may be contacted at info@stellacatucci.com. Stella Catucci acts on behalf of the Controllers and does not use user data for her own commercial or promotional purposes. Emails opened through links on the website are addressed directly to the Controllers. Any access to technical data is limited to what is necessary for website maintenance, security and proper operation.
Hosting and infrastructure
The website is hosted and distributed through the infrastructure provided by Vercel Inc. During the normal provision of the service, Vercel may process technical data such as the IP address, information derived from the IP address, device and browser type, operating system, requested page, date and time of the request, logs, diagnostics and possible errors. This information is used to deliver the website, ensure its security, prevent abuse and keep the service operational.
Browsing data
During normal use of the website, information systems and infrastructure providers may process technical data such as the IP address, device and browser type, operating system, date and time of the request, visited page, referrer and information relating to errors or security. This data is used to provide the website, ensure its stability and security, prevent abuse and diagnose technical problems.
Data sent by email
The website does not use contact forms. When a user selects an email link, the email application configured on their device is opened. Sending the message is voluntary and may involve the processing of the sender’s email address, name, telephone number, requested dates, number of guests, message content and any other information freely provided. Users are asked not to send particularly sensitive information or data that is not necessary for the enquiry.
Purposes and legal bases
Data sent by email is processed to answer enquiries about the property, check availability and provide information about the stay. The legal basis is taking steps at the user’s request before entering into a contract. If the enquiry results in a booking, data is processed to organise and manage the stay on the basis of contract performance. Certain data may also be processed to comply with administrative, tax, accounting or public security obligations required by law. Technical data may be processed to ensure website security, prevent abuse and protect the Controllers’ rights. Google Maps content is activated only following an explicit choice by the user.
Provision of data
The website may be visited freely. Sending an email is optional, although failure to provide the necessary information may prevent the Controllers from answering the enquiry, checking availability or managing a possible booking. Loading the Google Maps content is also optional: the address and external link remain available without activating the embedded map.
Recipients of personal data
Data may be processed, to the extent strictly necessary, by the Controllers, the technical website manager, hosting and email providers, administrative, tax or legal advisers and other providers necessary for managing the property. Data may also be disclosed to public authorities where required by law. Personal data is not sold, transferred for advertising purposes or used for newsletters or profiling.
Booking.com and Airbnb
The website contains external links to Booking.com and Airbnb. When users select one of these links, they leave the Berretta Rossa Private Residence website and access a platform operated by a third party. Bookings, payments, accounts, communications and other processing carried out on external platforms are governed by the privacy notices and terms of the relevant provider, acting as an independent data controller.
Google Maps
The contact page allows users to display a map provided by Google Maps. The map is not loaded automatically: replacement content is shown before activation and users may decide whether to load the service. When the map is activated, the browser establishes a connection with Google’s servers and may transmit technical data such as the IP address, device and browser type, visited page and other information required to provide the service. Google may also use cookies, identifiers or similar technologies in accordance with its own notices and the user’s settings. Users who do not wish to activate the map may use the ordinary external Google Maps link.
International data transfers
Some technical providers or external services may process data outside the European Economic Area. Where a transfer is carried out on behalf of the Controllers, it is made in accordance with applicable data protection law through adequacy decisions, standard contractual clauses or other recognised safeguards. When users access Booking.com or Airbnb or choose to load Google Maps, any transfers and processing carried out directly by the relevant providers are governed by their respective privacy notices.
Data retention
Email enquiries that do not result in a booking are retained for the time necessary to provide an answer and manage any subsequent communications and, as a rule, for no longer than 12 months from the last communication, unless longer retention is necessary to protect a legal right. Data relating to bookings and stays is retained for the duration necessary to manage the relationship and subsequently for the periods required by civil, tax, accounting, administrative or public security obligations. Technical data is retained according to the periods applied by the infrastructure providers and for as long as necessary to ensure service security.
Data subject rights
Where provided by applicable law, data subjects may request access to their personal data, rectification, erasure, restriction of processing and data portability, and may object to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. Requests may be sent to appartamento.berrettarossa@gmail.com. Data subjects may also lodge a complaint with the Italian Data Protection Authority or with the competent supervisory authority in the country where they live or work.
Updates to this notice
This notice may be updated following legal, technical or organisational changes. The latest version will be published on this page together with the date of the update.