Back to the website

Privacy policy

Last updated:

Data controller
Federico Denti · Fiore di Lago
[Indirizzo del titolare]
info@fioredilago.it

This policy explains which personal data we collect through the Fiore di Lago website, why we use it and what your rights are under Regulation (EU) 2016/679 (GDPR).

What we collect

Booking request. When you use the booking form you send us: your check-in and check-out dates, your name (optional), your email address and/or mobile number, how you prefer to be contacted and the language of the page. We do not ask for or store any payment data.

Technical data. Like any website, the hosting service receives your IP address and technical request data (browser, page visited, time) to run the site and protect it from abuse.

Why we use it

  • To answer your request and send you the price and information about your stay: a pre-contractual step taken at your request (Art. 6(1)(b) GDPR).
  • To keep the website secure and working: our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for advertising or profiling and we never sell it.

How long we keep it

We keep requests for as long as we need to handle them. If a request does not turn into a booking, we delete it within 12 months. If you book, your data is kept for the periods required by law (for example tax and guest registration rules).

Who processes data on our behalf

  • Cloudflare (Cloudflare, Inc.): hosts the website and runs the functions that receive your request; when enabled, it also provides visit statistics (Cloudflare Web Analytics) and the anti-spam check (Turnstile).
  • Resend (Resend, Inc.): delivers the email with your request to the host.
  • Booking.com calendar: the website reads only the already booked dates from the Booking.com calendar to show them in the calendar. None of your data is sent to Booking.com.

Some providers are based in the United States: transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses.

Links to Google Maps and Booking.com open external websites, which handle data under their own policies.

Cookies and statistics

The website uses no profiling cookies and no third-party cookies, so no cookie banner is needed. We use a single technical cookie, fdl_lang, which remembers the language you pick with the language switcher (lasts 1 year). Any visit statistics from Cloudflare Web Analytics are aggregated, cookie-free and do not identify visitors.

Your rights

You can ask us at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (Arts. 15–22 GDPR). Just write to the email address above. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your country.