Castello di Laterina, Valdarno, Tuscany
What data we collect, why, for how long and how to have it deleted. In plain words.
The data controller is Benincasa Apartments, Corso Italia 34, 52019 Laterina (Arezzo), Italy, VAT IT02376110512. For any request write to benincasaapartments@gmail.com or call the numbers on the Contact page.
The site is static and asks you nothing. The server records technical access data as any web server does: IP address, date and time, page requested. This keeps the site running and protects it from abuse, and is kept only as long as strictly necessary.
Typefaces are currently loaded from Google's servers, which means your IP address reaches Google. We are moving the fonts onto our own server to remove even this step.
On the Getting here page, the Google map stays switched off until you ask for it. If you do not load it, nothing reaches Google.
| What data | Why | How long |
|---|---|---|
| Name, email, phone | To manage the booking and contact youPerformance of the contract | 10 years |
| Payment details | To take payment. Card details are handled by Stripe: we never see or store themPerformance of the contract | 10 years |
| Guests' identity documents | Mandatory report to the Italian Police within 24 hours of arrivalLegal obligation, art. 109 TULPS | As required by law |
| Number of guests and nights | Regional statistical returns and tourist tax, where dueLegal obligation | As required by law |
| Invoicing details | To issue tax documentsLegal obligation | 10 years |
| How you reached the site | A single word — for example “Google” or “Maps” — recorded on your request, to understand which channels bring bookings. No cookies, no trackingLegitimate interest | As long as the booking |
Now and then we write to the people who asked us to: a few emails a year, the best times to come, the occasional last-minute opening. It is separate from booking: it is not needed to stay with us and it earns you no discount, so the choice stays genuinely free.
| What data | Why | How long |
|---|---|---|
| Email address and name | Sending you our messagesYour consent | Until you withdraw it |
| Date and source of every consent and withdrawal | Being able to show when you gave it and when you withdrew it, as the law requires of usLegal obligation, art. 7 GDPR | 5 years from withdrawal |
You can give or withdraw your consent whenever you like, on your own, without writing to us and without explaining why. Emails about your booking keep arriving regardless: those are part of the stay.
Manage your preferencesOnly those we need in order to host you, and each sees only what they require. We pass data to nobody else.
| Our hosting provider | Hosts the site and the database |
| Stripe | Processes card payments |
| Italian State Police | Receives guest data as required by law |
| Our accountant | Receives invoicing data |
This site sets no cookies of any kind: not technical, not analytical, not advertising. That is why you find no accept-or-reject banner: there would be nothing to accept.
If we ever introduce tools that require cookies, a consent request will appear and this page will be updated first.
Regarding data about you, you may always:
To exercise any of these rights just write to us: we reply within one month. If you believe we have not handled things properly, you may contact the Italian Data Protection Authority.
Write to us