1. Data controller
The data controller is Vacchetti Roberto, Residence La Quiete, Guarene - fraz. Castelrotto 66, Italy.
Telephone: +39 351 642 7280.
2. Data processed
The form may collect first name, last name, telephone number, email address, preferred contact method, stay dates, number of guests, studio type, bed configuration, microwave request, presence of a dog, notes and messages sent through the chat.
Strictly necessary technical data are also used for operation and security, such as the selected language, timestamps, session identifier and technical chat token. The booking-request database does not store the visitor's IP address or browser user-agent. The hosting provider may still create ordinary technical security logs.
3. Purposes and legal basis
Data are processed to receive, assess and answer the booking request, contact the person, manage related communications and provide the website chat.
The main legal basis is taking pre-contractual steps at the data subject's request under Article 6(1)(b) GDPR. Technical security measures are based on the controller's legitimate interest in protecting the website and preventing abuse. No profiling or automated decision-making is carried out.
4. Providing data
Mandatory fields are required to assess and answer the request. Without them, the form cannot be submitted. Optional notes and preferences may be omitted.
5. Processing, recipients and Telegram
Data are processed electronically with measures designed to protect them from unauthorised access, loss or misuse. They may be accessed by the controller, authorised persons and the hosting provider for necessary technical activities.
The Telegram bot receives only a reduced notification containing the request number, guest name, arrival date and chat code. Full details remain in the website database. When the chat is used, message text is forwarded to Telegram so that the Residence can reply.
Telegram processes data according to its own privacy policy and international infrastructure. Data are not sold or publicly disclosed.
6. Retention and deletion
Booking-request data and the related chat are deleted from the website database within 7 days of submission. General chats started without a booking request are deleted within 7 days of their last use.
The controller also deletes operational copies in the Telegram conversation within the same period. Telegram may retain technical data for the periods described in its privacy policy.
If the request is confirmed and becomes a booking, only the necessary data may be transferred to the booking system and retained for the different periods required by contractual, administrative and legal obligations.
7. Cookies and technical tools
The website uses only technical tools: the PHP session cookie for form security, lingua_laquiete to remember the selected language and laquiete_chat to recognise the conversation. The chat cookie lasts no more than 7 days; the language cookie may last up to 12 months.
No advertising cookies, profiling systems, Google Analytics or marketing pixels are used. Prior consent is not required for these strictly technical tools.
8. Data subject rights
You may request access, rectification, erasure, restriction, objection and, where applicable, data portability. You may also withdraw any consent without affecting previous processing, although booking-request handling normally relies on pre-contractual steps rather than consent.
Requests may be addressed to the controller by calling +39 351 642 7280.
9. Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in your country.