Privacy Policy

1. Who we are

This website is operated by Julia Alm and Kevin Wacker ("we", "us"), private individuals based in Zürich, Switzerland. We rent out the holiday property Casa del Lupino Bianco, located in Castel Boglione, Piedmont, Italy.

Contact: info@casadellupinobianco.com

2. What personal data we collect and why

Booking enquiries (via this website)

When you submit a booking request through this website, we collect:

• First and last name
• Email address
• Phone number (if provided)
• Country of residence
• Requested check-in and check-out dates
• Number of guests and whether you are bringing a dog
• Any additional information you include in your message

We use this data solely to respond to your enquiry and manage your reservation. The legal basis is your consent (Article 6(1)(a) GDPR), given when you submit the form and accept this Privacy Policy.

Guest registration — legal obligation

Under Italian law, all accommodation providers must register guest details with the local police authority (Questura) via the Portale Alloggiati portal. Prior to or upon arrival, we will therefore ask each guest to provide a copy of their passport or identity document. The data collected includes:

• Full name
• Date of birth
• Nationality
• Document type, number, and expiry date

The legal basis for this processing is a legal obligation under Italian law (Article 6(1)(c) GDPR).

Regional tourism statistics (Ros1000)

We are also required by law to report certain guest data to the Ros1000 regional tourism database (Regione Piemonte). This covers basic demographic and stay information. The legal basis is again a legal obligation (Article 6(1)(c) GDPR).

3. How we share your data

FormSubmit — Booking requests submitted through this website are delivered to us via FormSubmit (formsubmit.co), a third-party email forwarding service. Your data passes through their servers solely for the purpose of transmitting your enquiry to us by email. FormSubmit acts as a data processor on our behalf.

Italian authorities — Passport and identity data is shared with the local Questura and the Ros1000 database as required by Italian law.

We do not share your personal data with any other third parties. We will never use your contact information for marketing purposes.

4. How long we keep your data

We retain booking correspondence and guest information for a maximum of three (3) years following your stay, after which it is permanently deleted. Data submitted to the Italian authorities is governed by their own retention rules.

5. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Request deletion of your data (where no legal obligation requires us to retain it)
• Restrict or object to our processing in certain circumstances
• Withdraw your consent at any time, though this does not affect data already processed

To exercise any of these rights, contact us at info@casadellupinobianco.com. We will respond within 30 days.

You may also lodge a complaint with a supervisory authority. As we are based in Switzerland, the relevant authority is the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch. If your complaint concerns the Italian property, you may also contact the Italian Garante per la protezione dei dati personali at garanteprivacy.it. You also have the right to lodge a complaint with the data protection authority in your country of residence.

6. Security

Your booking enquiry is transmitted over an encrypted HTTPS connection and delivered to us by email. We do not store guest data in any online database beyond our private email inbox.

7. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.