Controller and contact
The data controller is Antonio Cigliano (locatore privato non imprenditoriale), contactable at info@cadeicoppi.com and established at Via del Cristo, 19/a, 41014 Levizzanina MO, Italia. The property is located at Via del Cristo, 17, 41014 Castelvetro di Modena (MO), Italia.
Data processed
We process identification and contact details, stay dates and party size, messages, acknowledgements and authorisations recorded with date and time, security and anti-spam technical data, request status, price summaries, Stripe technical references, and card-guarantee, charge and refund status. The full card number, CVC and authentication credentials are collected and stored directly by Stripe and never pass through the website database.
Purposes and legal bases
Data is used to answer requests, verify availability and price, enter into and perform bookings, send transactional communications, prevent abuse and fraud, protect the parties’ rights, and meet legal, tax and public-security duties. Legal bases are pre-contractual steps requested by the guest, contract performance, legal obligations, and legitimate interests in security and legal protection. Acknowledging this notice is not consent to processing required for these purposes.
Recipients and providers
Data may be processed as necessary by Vercel (hosting), Neon PostgreSQL (database), Resend (email), Stripe (payments), email providers, and advisers or authorities when required. Providers act under their respective roles and data-processing arrangements.
International transfers
Some providers may process data outside the European Economic Area. Where this occurs, transfers must rely on adequacy decisions, standard contractual clauses, or another GDPR safeguard, according to the contractual configuration actually adopted.
Retention
Uncompleted requests are normally retained for 12 months after closure; correspondence about a stay for 24 months after check-out; contractual, accounting and tax data for 10 years or another statutory period; and technical and anti-spam logs for up to 90 days. Where there is a dispute, fraud concern or authority requirement, necessary data may be retained until the matter is resolved. Data no longer needed is deleted or anonymised.
Whether data is required
Fields marked as required are needed to handle the request and, later, the booking. Without them we cannot enter into the contract. The free-text message and cot request are optional. No solely automated decision produces legal effects for the guest.
Rights and complaints
You may request access, rectification, erasure, restriction, portability or object where applicable by writing to info@cadeicoppi.com. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or your local supervisory authority.
Marketing and updates
The form does not include marketing subscriptions. Any future promotional consent must be separate, optional and withdrawable. This notice may be updated; its revision date is shown on this page.
