Data controller
Barbara Bedosti, Vicolo Viazzolo 2, 40124 Bologna (BO), Italy, email: info@atticocastiglione.it.
What data we process and why
Browsing data
When you visit the website, the hosting service (Cloudflare, Inc., United States) automatically logs some technical data: IP address, browser and device type, date and time of the request, and the page visited. This is used only to run the website and keep it secure. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR). Cloudflare keeps this data only for as long as needed for these purposes, as described in its privacy policy, and it is not used to identify you. As Cloudflare is based in the United States, the transfer relies on the safeguards provided by the GDPR (EU-U.S. Data Privacy Framework and/or standard contractual clauses).
Emails you send us
If you write to the address above, we use your email address and the content of your message only to reply to you. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). We keep the correspondence for as long as needed to handle your request and, if a stay follows, for the periods required by law.
Bookings
The website does not take bookings or payments. The date form simply opens the Airbnb listing with the dates you chose: no data is sent to us. Bookings are made on Airbnb, which processes your data as an independent controller under its own privacy policy.
Cookies and tracking
The website does not use cookies, analytics, profiling or advertising tools. If you close the notice suggesting the site in your language, we only store that choice in your browser's memory (localStorage), so it is not shown again. This is a technical tool that requires no consent and that you can delete at any time from your browser settings. Fonts are hosted on the website itself: no resources are loaded from third-party servers.
Links to Airbnb and Google Maps take you to external websites only if you open them; from then on, those services' privacy policies apply.
Who we share data with
Your data is never sold or published. It may only be accessed by the providers that help us run the website and email (Cloudflare for hosting and Aruba S.p.A., Italy, for email), acting as data processors.
Your rights
You may at any time request access to your data, its rectification or erasure, restriction of processing, object to processing, or receive your data in a portable format (Arts. 15–22 GDPR), by writing to info@atticocastiglione.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).