Privacy policy

1. Data controller

The data controller is Iwan Donateo, host of the tourist accommodation “Dimora Pangea”, Montopoli di Sabina (RI), Italy — CIN IT057044C29W9UI3V2, CIR 057044-LOC-00016.

For any privacy question, write to iwandonateo@hotmail.com or call +39 329 267 5324.

2. What data we process

• Browsing data: IP address, browser and device type, pages visited, date and time. These are collected automatically by the servers hosting the website, for its operation and security.
• Data you send us: first and last name, phone, email, dates of stay, number of guests and your message, when you fill in the “Request a quote” form or contact us via WhatsApp, email or phone.
• Stay data: if you book, the data needed for the booking and the guests' identity-document details required by law on arrival.

3. The “Request a quote” form

The form does not store any data on the website: it prepares the message on your device and opens it in WhatsApp (or your email app). We only receive the data when you press “send” in the app. From then on, it is also processed by WhatsApp (Meta) or your email provider under their own privacy policies.

4. Why we process data and on what legal basis

• Answering your enquiries and preparing a quote — pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Managing your booking and stay — performance of a contract (Art. 6(1)(b) GDPR).
• Complying with legal obligations: reporting guest details to the police via the Alloggiati Web portal (Art. 109 TULPS), regional/ISTAT tourism statistics, tourist tax where applicable, tax and accounting obligations (Art. 6(1)(c) GDPR).
• Keeping the website working and secure — legitimate interest of the controller (Art. 6(1)(f) GDPR).

We do not use your data for advertising or profiling, and we never sell it.

5. How long we keep data

• Enquiries and quotes not followed by a booking: as long as needed to reply, and no longer than 12 months.
• Booking data and tax records: 10 years, as required by tax law.
• Data sent to Alloggiati Web: we keep no copies beyond what the law requires.
• Browsing data: for the technical period set by the hosting provider (usually a few days or weeks).

6. Who may receive the data

• Vercel Inc. (website hosting provider), which processes browsing data as a data processor.
• Public authorities when required by law (police, Region/ISTAT, Municipality, Revenue Agency).
• Our accountant and advisers, for tax compliance.
• Platforms you choose: if you book via Booking.com or Airbnb, or message us on WhatsApp, these companies process your data as independent controllers under their own policies.

7. Transfers outside the European Union

Some providers (Vercel, Meta/WhatsApp, Google) may process data in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework adequacy decision or on the Standard Contractual Clauses approved by the European Commission.

8. Map and external content

The Google Maps map on the “Surroundings” and “Contact” pages only loads if you activate it with a click. From that moment Google may collect data such as your IP address and use cookies. See the Cookie policy for details.

9. Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing, data portability, or object to processing (Arts. 15–22 GDPR) by writing to iwandonateo@hotmail.com. We will reply within 30 days.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

10. Is providing data mandatory?

Providing data for a quote or booking is optional, but without it we cannot reply or host you. Identity-document details are required by law in order to stay at the property.

11. Changes

We may update this policy. The date of the last update is shown at the bottom of the page.