This Privacy Policy explains how personal data is collected, used, and protected when you visit https://casaangelacomolake.com (the “Website”) and when you use our services, including booking and payment for short-term rentals.
We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection laws.
Who we are
Our website address is: https://casaangelacomolake.com.
The Website is a showcase and booking platform for a short-term rental property located on Lake Como, allowing users to request information, make reservations, and complete payments online.
Personal data we collect
We may collect and process the following personal data:
Data you provide directly
- Name and surname
- Email address
- Phone number
- Billing details
- Booking information (dates of stay, number of guests, special requests)
- Payment-related information (processed securely by third-party providers)
- Messages sent through contact or booking forms
Automatically collected data
- IP address
- Browser type and device information
- Pages visited and time of access
- Cookies and similar tracking technologies
Purpose and legal basis of processing
Personal data is processed for the following purposes:
- To respond to inquiries and messages
- To manage reservations and provide rental services
- To process payments and prevent fraud
- To comply with legal and regulatory obligations
- To improve the functionality and performance of the Website
- To send service-related communications (booking confirmations, instructions, updates)
- To send marketing communications, only where consent has been given
Processing is based on contractual necessity, legal obligations, legitimate interests, and/or user consent, depending on the specific purpose.
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and the browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available at automattic.com/privacy. After approval of your comment, your profile picture may be visible to the public next to your comment.
Media
If you upload images to the Website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract any location data from images on the Website.
Booking and payments
When you make a booking through the Website, we collect the personal data necessary to process your reservation, manage your stay, and comply with legal obligations.
Payments are handled through secure third-party payment service providers. We do not store full credit card details on our servers. These providers process your data in accordance with their own privacy policies.
Cookies
If you leave a comment, you may opt in to saving your name, email address, and website in cookies. These cookies last for one year.
If you visit our login page, a temporary cookie will be set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, several cookies are set up to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will persist for two weeks. When you log out, login cookies are removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and expires after one day.
The Website may also use technical, analytical, and (where applicable) third-party cookies to improve user experience and analyze traffic. You can control cookies through your browser settings.
Embedded content from other websites
Articles or pages on this Website may include embedded content (for example videos, images, maps, or booking tools). Embedded content from other websites behaves in the same way as if you visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
Who we share your data with
Personal data may be shared only with trusted third parties, including:
- Hosting and IT service providers
- Payment service providers
- Booking and property management tools
- Accounting, legal, and tax consultants
- Public authorities, where required by law
If you request a password reset, your IP address will be included in the reset email.
All third parties are required to process personal data in compliance with applicable data protection laws.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely.
For users that register on the Website (if any), personal information provided in the user profile is stored. All users can see, edit, or delete their personal information at any time (except usernames). Website administrators can also see and edit that information.
Booking, payment, and invoicing data are retained only for as long as necessary to fulfill contractual purposes and comply with legal obligations.
What rights you have over your data
You have the right to:
- Access your personal data
- Request correction or update
- Request deletion of your personal data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
If you have an account on this site or have left comments, you can request an exported file of the personal data we hold about you. You can also request that we erase any personal data we hold about you, excluding data we are required to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
Some service providers may process data outside the European Economic Area. In such cases, appropriate safeguards are adopted to protect personal data.
Data security
We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, misuse, or alteration, including secure servers and restricted access to data.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. Any changes will be published on this page with an updated revision date.
