Privacy policy

Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”). Last updated: September 2026.

Data controller

The data controller is Dimora di Bosco, which you can contact at the details below with any question about this policy.

What data we process

We process the data you give us when you write to us using the form on the website, by email, by phone or on WhatsApp: name, email address, phone number, dates of stay, number of guests and the content of your message.

Like any website, the server also records some technical browsing data (for example IP address, date and time of the request, browser), which is needed for the website to work and to keep it secure. The website does not use any analytics or profiling tools.

Why we process it and on what legal basis

• Replying to your requests for information and bookings: the processing is necessary in order to take steps at your request prior to entering into a possible contract (Art. 6(1)(b) GDPR).
• Managing your stay, if the request becomes a booking, and complying with the legal obligations that apply to an accommodation provider (Art. 6(1)(b) and (c) GDPR).
• Keeping the website secure and preventing misuse: legitimate interest of the controller (Art. 6(1)(f) GDPR).

We do not use your data for newsletters or promotional communications, and we do not pass it on to third parties for marketing purposes.

Providing your data

Providing your data is optional, but without your contact details we cannot reply to your request.

Who may process the data

The data is processed by us, using electronic tools and appropriate security measures. It may be accessed by the suppliers that provide us with technical services (for example website hosting and email), appointed as data processors where required. The data is not disclosed to the public.

If you write to us on WhatsApp or open the map on Google Maps, those services process data according to their own privacy policies, including outside the European Union.

How long we keep it

Data from requests is kept for as long as needed to reply to the request and no longer than 24 months. If the request becomes a stay, the necessary data is kept for the periods required by law (for example for tax purposes).

Your rights

At any time you can ask us for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing, as provided for by Articles 15 to 22 of the GDPR. To exercise these rights, simply write to us at the email address given above.

If you believe that the processing infringes the GDPR, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority (www.garanteprivacy.it).

Changes

We may update this policy, for example when we add a service to the website. The date of the last update is shown at the top.