Data controller
The data controller is Antonio Previtera, a private individual renting the holiday apartment Aosta20 Urbe Domus (Via Aosta 20, 00182 Rome, Italy). For any privacy request write to bookinglacasetta@gmail.com.
What data we collect
- Account data: full name, email, phone (optional), password (stored only in encrypted form).
- Booking data: arrival and departure dates, number of guests, notes, amounts and payment status.
- Payments: handled by Stripe; the site never sees or stores your card details.
- Technical data: IP address and browser information, used for security (login attempt limits, anti-robot check).
- On arrival the law requires the guests' identity documents: they are not collected through the site.
Why we use it (purposes and legal basis)
- Managing accounts, booking requests, payments and messages about your stay: performance of a contract (Art. 6.1.b GDPR).
- Legal obligations: guest registration with the Police (Alloggiati Web), ISTAT statistics, Rome city tax, tax obligations: legal obligation (Art. 6.1.c).
- Protecting the site from abuse and unauthorised access: legitimate interest (Art. 6.1.f).
We send no advertising, do no profiling and never sell your data.
Who may receive it
- The site's hosting provider, storing data on our behalf.
- Google (Gmail), to send the site's emails.
- Stripe, for online payments.
- Cloudflare (Turnstile), for the anti-robot check at registration.
- Public authorities, where required by law (Police, City of Rome, ISTAT, Tax Agency).
- To the Airbnb calendar we only send booked dates, with no names or other personal data.
Some providers (Google, Stripe, Cloudflare) may process data outside the European Union: such transfers rely on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.
How long we keep it
- Account: until you ask us to delete it.
- Bookings and payments: 10 years, for tax and accounting obligations.
- Technical security data: only as long as strictly necessary (usually a few days).
Your rights
You can ask at any time to access, correct or delete your data, restrict processing, receive your data (portability) and object to processing based on legitimate interest (Arts. 15-22 GDPR) by writing to bookinglacasetta@gmail.com. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookies
This site only uses technical cookies needed for it to work: no consent is required for them.
- session: keeps you logged in and protects forms from forged submissions (CSRF). Deleted when you close the browser.
- lang: remembers your language. Lasts 1 year.
We use no profiling cookies and no analytics. The map on the Contact page uses OpenStreetMap, which sets no cookies: your browser downloads the map images from OpenStreetMap's servers, which therefore receive your IP address. The Cloudflare anti-robot check and the Stripe payment page are run by those providers under their own privacy policies.
Updates
Last updated: 2026-11-07. Any changes will be published on this page.