Privacy Policy

1. Data controller

The data controller is Giampaolo Castellana, trading as L’Antico Pozzo Relais, with registered address at Largo Pompilio Numa 2, 74015 Martina Franca (TA), Italy.

For privacy-related requests: [email protected].

2. Scope of this policy

This policy applies to anticopozzorelais.com. It does not cover processing carried out independently by external websites and services reached through links, such as WhatsApp and Google Maps.

3. Data processed and purposes

Technical browsing data

IT systems and hosting infrastructure may process the IP address, date and time of the request, requested resource, user agent, response status and other technical data required to deliver the website, maintain its security and stability, and diagnose faults.

The legal basis is the controller’s legitimate interest in making the website available and protecting it, under Article 6(1)(f) GDPR.

Availability requests

The form on the homepage processes check-in and check-out dates and the number of guests locally in the browser. The website does not send this data to its own server and does not store it. After an explicit action by the user, WhatsApp opens with a pre-filled message that can be edited or cancelled before sending.

When the user sends a message through WhatsApp or contacts the property by telephone, the information provided is processed to reply, check availability and take pre-contractual steps at the user’s request under Article 6(1)(b) GDPR.

4. Providing data

Technical data is required to use the website. Contacting the property through WhatsApp or by telephone is optional; without the stay dates and number of guests, the property may be unable to check availability.

5. Processing and security

Data is processed using electronic tools and organisational and technical safeguards proportionate to the risks. The website is static, has no database or CMS, and does not use profiling or automated decision-making. The language selector uses ordinary links and does not store a language preference in cookies or browser storage.

6. Recipients and providers

Technical data may be processed by the hosting and CDN provider used to deliver and protect the website. Information voluntarily sent through WhatsApp is received by the controller and is also processed by that service provider under its privacy policy for the European Economic Area.

Data may also be disclosed to authorised advisers or providers where necessary, and to public authorities where required by law. It is not made public.

7. Transfers outside the European Economic Area

Some technology providers may process data in countries outside the European Economic Area. The controller must ensure that any transfer relies on an adequacy decision or appropriate safeguards under Articles 45–49 GDPR.

8. Retention

The website does not retain data entered in the availability form. Technical logs are retained by the hosting and CDN provider only for as long as necessary for security, diagnostics, service continuity and compliance with legal obligations, according to the settings applicable to the service.

Information contained in requests received through WhatsApp or by telephone is retained for as long as necessary to manage the request. If a booking is made, it may be retained for any additional periods required by administrative, tax or legal obligations or to protect legal rights.

9. Data subject rights

Where provided for by the GDPR, data subjects may request access, rectification, erasure, restriction of processing, data portability and object to processing. They may also withdraw consent, where applicable, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to [email protected]. Data subjects may lodge a complaint with the Italian Data Protection Authority or their competent supervisory authority.

10. External services and links

Google Maps is neither embedded nor loaded automatically. The map shown on the page is a local image; Google Maps is reached only after the user clicks the link. From that point, the external service’s terms and privacy information apply.

11. Changes to this policy

This policy must be updated whenever the website’s features, providers, purposes or processing methods change. The date of the latest revision appears at the top of this page.