Privacy policy

This policy explains how we process the personal data of people who visit laionecasavacanze.com and of people who contact us (Articles 13 and 14 of Regulation (EU) 2016/679, the “GDPR”).

Data controller

Giusti Mirna Florinda, sole proprietorship, L'Aione Casa Vacanze, Via Volterrana Sud 23, Il Castagno, 50050 Gambassi Terme (FI), Toscana. VAT no. IT01558570477.

For any request about your data: [email protected].

What data we process and why

Browsing data. When you visit the site, our hosting provider records your IP address, the date and time and the page requested in technical logs. This is needed to run the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Logs are kept for the limited time set by the provider.

Data you send us. If you write to us by email or through booking channels, we process your name, contact details, dates, number of guests and the content of your message, to reply and prepare a quote or booking. Legal basis: steps taken at your request before a contract (Art. 6(1)(b)). If no booking follows, we keep the data for as long as needed to handle your request; if a booking follows, for the periods required by law for accounting and tax purposes.

Providing data is optional, but without it we cannot answer your request. If you book, guest data is processed according to the notice you receive at the time of booking.

Cookies

The site does not use profiling or marketing cookies and does not use third-party analytics. It does not set non-essential technical cookies either, which is why there is no banner. Fonts are hosted on the site itself: your IP address is not sent to Google.

If we later enable measurement or advertising tools, we will update this page and ask for your consent before setting any non-essential cookie.

Who receives the data

Data is processed by the controller and by the providers that run the site (hosting) and email, appointed as processors. We do not sell or pass data to third parties. If a provider processes data outside the European Economic Area, it does so with appropriate safeguards under the GDPR (for example standard contractual clauses).

Third-party sites

From the site you can reach Instagram, Booking.com and Google Maps. These are third-party services that process data as independent controllers: see their own notices to learn how.

Your rights

You can ask us at any time for access, rectification, erasure, restriction and portability of your data, and object to processing (Articles 15–22 GDPR), by writing to [email protected].

If you believe the processing breaches the rules, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your own country.

Last updated: November 2026