Last updated: 8 November 2026

This page explains how the personal data of visitors to hotelpiccolomondosanvitolocapo.it is processed under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003, and which cookies the site uses.

1. Data controller

2. What data we process and why

a) Browsing data

The systems running the site record some technical data automatically sent by your browser (IP address, browser type, pages visited, date and time). They are used only to keep the site working and secure.

• Legal basis: the controller's legitimate interest in the security of the site (Art. 6(1)(f) GDPR).
• Retention: no longer than two months, unless needed to investigate a crime.

b) Newsletter

If you subscribe to the newsletter we process your name, email and city only to send you our news. The form and the emails are handled by the DirectMail service (e3 Software, United States). You can unsubscribe at any time from the link in every email.

• Legal basis: your consent (Art. 6(1)(a) GDPR).
• Retention: until you unsubscribe.

c) Requests by email, phone and WhatsApp

If you contact us, we process the data you give us (name, contact details, dates of stay, number of guests, message) only to answer your request and, if you wish, to arrange your stay.

• Legal basis: pre-contractual measures or performance of a contract at your request (Art. 6(1)(b) GDPR).
• Retention: for as long as needed to handle the request; if you book, for the duration of the relationship and the periods required by law (e.g. tax obligations).

If you choose to write to us on WhatsApp, your message also goes through the WhatsApp service (WhatsApp Ireland Ltd.), under its own terms.

d) Online booking

The “Book” button takes you to the Simple Booking booking engine, on an external website. The data you enter there (guest details, dates, any payment details) is processed to manage the booking, on the basis of the contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). The hotelpiccolomondosanvitolocapo.it site does not receive or store payment details.

3. Who we share data with

Data is processed by authorised hotel staff and is not published or sold. The following technical providers may process it on the controller's behalf and only for the purposes above:

• netcup GmbH (Karlsruhe, Germany): server hosting the site;
• Cloudflare, Inc., jsDelivr, BootstrapCDN and Font Awesome: delivery of some technical libraries and icons used by the pages, so they receive the visitor's IP address; Cloudflare also manages the domain (DNS);
• DirectMail (e3 Software, United States): newsletter form and emails; the form also loads libraries from Google and Amazon Web Services;
• Simple Booking: online booking engine, when you use it;
• Snazzy Maps / Google (map) and TripAdvisor (reviews): only if you give consent in the banner (see section 6).

4. Transfers outside the European Union

Some providers may process data in the United States (for example Cloudflare, DirectMail, Google and TripAdvisor). In these cases transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the Commission.

5. Your rights

At any time you can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Arts. 15-22 GDPR). If you gave consent you can withdraw it at any time, without affecting what was done before.

To exercise your rights write to [email protected]: we will reply within one month. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

6. Cookie policy

Cookies are small text files a website stores in your browser. This site uses a single technical cookie, which does not require consent:

External content. Only if you allow it in the banner, the map on “Contact us” (Snazzy Maps, based on Google Maps) and the TripAdvisor reviews widget on “About us” are loaded. These services may set their own cookies and collect data under their own policies: Google, Snazzy Maps, TripAdvisor. Without consent they are not loaded.

Managing cookies. You can change or withdraw your choice at any time from “Cookie preferences” at the bottom of every page or with the button below. You can also delete or block cookies in your browser settings.