Privacy notice

In short

This website does not follow you and does not profile you. It uses no cookies and has no visitor statistics. The only thing that comes from outside is the map tiles in the Travel tips. As long as you are only looking at it, nothing about you is left behind on my site.

Your details exist only if you write to me: through the form, on WhatsApp, by phone or by email. In that case I use them to reply to you and to arrange your stay, and I give them to no one.

Who I am

The data controller is Roberto Bauce, Via Carlo Riboni 10, 22042 San Fermo della Battaglia (CO), Italy.

For anything concerning your details you can write to info@villaazaleacomo.it or call me on +39 340 465 4590.

What this website does not do

• It uses no cookies. None at all, not even technical ones. That is why there is no banner asking you to accept them: there is nothing to accept.
• It loads just one thing from anyone else’s servers: the maps in the Travel tips. The fonts, the images and the map of where to find us are hosted on my own site, not on Google or elsewhere. The maps in the Travel tips, on the other hand, are drawn with OpenStreetMap tiles: when you open a tip, or choose “Map” in the list, your browser downloads them from the servers of the OpenStreetMap Foundation. As with any website you visit, the Foundation thereby receives your IP address, your browser type, the fact that you came from villaazaleacomo.it and the area of the map you are looking at. It receives nothing else from me: none of your form details, no cookies. The rest of the website only talks to villaazaleacomo.it. I show these maps on the basis of my legitimate interest (Art. 6.1.f GDPR): letting you see where the places I recommend are.
• It has no visitor statistics. No Google Analytics, no Tag Manager, no equivalent tool. I do not know how many pages you look at, or for how long.
• It does not profile you and carries no advertising. I build no profiles, make no automated decisions about you, and neither sell nor share your details.
• It leaves nothing in your browser. No cookies, no local storage.

What happens if you write to me through the form

When you fill in the request form I collect what you write in it: first name, surname, email, phone number, arrival and departure dates, number of guests, the option you chose, whether you need a cot, and your message.

• Why: to reply with a quote and to arrange your stay.
• On what basis: because you asked me to. In legal terms these are pre-contractual steps taken at your request (Art. 6.1.b GDPR).
• Where they end up: in an email that I read myself. The website keeps no archive of requests: there is no database of who wrote to me, only my mailbox.
• If you don’t give them: I simply cannot reply. Nothing is collected behind your back beyond what is described just below.

The “how you got here” note

At the bottom of that email there is also a line saying where you came from — for example “Google search”, “Booking”, “Instagram”, or “direct visit” — along with any campaign, the language of the page you were looking at, and whether you were using a phone, a tablet or a computer.

I am telling you plainly because it is the only thing on this page that you did not type yourself: it helps me understand which channels bring real guests, and therefore where it makes sense to spend my time. The legal basis is my legitimate interest in measuring my own channels (Art. 6.1.f GDPR).

How it works, concretely:

• there is no cookie and nothing stored in your browser: the information is read when you open the page and travels together with the form. If you reload the page before sending, it is lost;
• it does not identify you: it says “Instagram”, not who you are;
• your IP address never appears in the email and is not kept;
• your browser type is not kept: only “phone / tablet / computer” is derived from it, and the rest is discarded.

The only two things the website stores by itself

To stop anyone from submitting the form dozens of times in a row, the site keeps a counter for 15 minutes, tied to an encrypted fingerprint of your IP address. The address itself is never stored, the fingerprint cannot be traced back to you, and after a quarter of an hour it disappears on its own.

And when a message has gone through, for two minutes the site keeps your first name, just long enough to greet you by name on the page you see straight afterwards. It never appears in the page address — there is only a random code there — it is deleted as soon as it is read, and it expires on its own anyway.

If you message me on WhatsApp, call me or email me

The WhatsApp button on this site is a plain link: until you tap it, it loads nothing and WhatsApp does not know you are here. If you do tap it, the conversation takes place inside WhatsApp and from that moment WhatsApp’s own privacy notice applies too, over which I have no control. The same goes for a phone call or an email you send me directly.

Who else handles these details

Only those I need in order to run the website, the mailbox and the maps, and only for that:

Who	For what
Hostinger International Ltd (European Union)	hosts the website
Aruba S.p.A. (Italy)	runs the mailbox and sends the emails
OpenStreetMap Foundation (United Kingdom)	provides the map tiles in the Travel tips; receives your IP address only when a map opens

The availability calendar reads the booked dates from Booking.com, but it is my server that asks for them: your browser never talks to Booking and none of your details are sent there.

No one else. There are no agencies, no advertising, no analytics tools.

Hostinger and Aruba operate within the European Union. The OpenStreetMap Foundation is based in the United Kingdom, which the European Union recognises as providing an adequate level of data protection (European Commission adequacy decision, renewed until 2031). On the Foundation’s behalf, the tiles are delivered by the network of Fastly, a US company that takes part in the EU-US Data Privacy Framework, usually from a server close to you. For what the Foundation does with this data, its own privacy policy applies: osmfoundation.org/wiki/Privacy_Policy.

How long I keep them

• If the request does not turn into a booking: I keep the email for 12 months, long enough to reply and to remember who had written to me, then I delete it.
• If you become my guest: I keep the details for as long as tax obligations and the mandatory reporting duties for accommodation businesses require.

Your rights

You can ask me at any time to see the details I hold about you, to correct them, to delete them, to restrict their use, to receive them in a file or to object to their processing. Just write to info@villaazaleacomo.it: I reply myself, not an office.

If you believe I am getting it wrong, you can contact the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Children

This website is not intended for children and I do not knowingly collect their details. Bookings are made by an adult.

If this page changes

If I change anything in the way I handle your details, I will update this page and change the date below.

Last updated: 24 September 2026.