Privacy policy

Last Updated: June 2026

The purpose of this Privacy Policy is to describe how this website is managed regarding the processing of the personal data of users/clients who visit it and use the booking service. Data processing is carried out in accordance with the principles of fairness, lawfulness, transparency, protection of confidentiality, and user rights, in compliance with EU Regulation 2016/679 (GDPR).

1. Data Controller
The Data Controller is:
Name: Emiliana Piera Sarzotti / Simone Sarzotti
Contact Email: lafrase.se@gmail.com

2. Types of Data Collected
The personal data collected through this website, either independently or through third parties, includes: Browsing data: IP address, log data, browser type, and parameters of the device used to connect to the website (collected automatically for the sole purpose of ensuring the correct functioning of the site). Booking data: First name, last name, email address, phone number, dates of stay, number of guests, and any specific notes or requests. Payment data: Credit card details or payment method information are not collected or stored by the Data Controller. They are handled directly by the secure payment gateway, Stripe.

3. Purposes and Legal Basis of Processing
Personal data provided by users will be used exclusively for the following purposes: Booking and accommodation management: To confirm, modify, or manage the stay at the apartment, communicate with the guest before and during their stay, and fulfill contractual obligations (Legal basis: Performance of a contract). Legal obligations: To comply with tax and accounting obligations, as well as to communicate guest data to public safety authorities (e.g., the State Police "Alloggiati Web" portal), where required by current legislation (Legal basis: Compliance with a legal obligation).

⚠️ Transparency Note: Your data will not be used for marketing purposes, profiling, or disclosure to third parties for commercial purposes.

4. Processing Methods and Payment Security Data processing is carried out using computer and/or telematic tools, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data. Payment Security (Stripe): For the management of online payments, the website uses the secure platform Stripe. Stripe acts as an independent Data Controller for transaction management. Credit card data is encrypted and transmitted directly to Stripe without passing through our servers. For more information, please consult the Stripe Privacy Policy.

5. Communication and Scope of Data Disclosure Personal data will not be disseminated to the public but may be disclosed to third parties strictly involved in managing the service, such as: Internal staff responsible for managing the property (e.g., cleaning or check-in staff). Public Safety Authorities (e.g., Police Headquarters) in compliance with legal obligations regarding guest registration.

6. Data Retention Period Data will be stored only for the time strictly necessary to manage the booking and the stay, and subsequently for the period required by current tax and civil regulations (generally 10 years from the invoice date). Browsing data is deleted immediately after its anonymous statistical processing.

7. Rights of the Data Subject In accordance with the GDPR, users have the right to: Access their personal data in our possession. Request the rectification of inaccurate data or the integration of incomplete data. Request the erasure of data (right to be forgotten) if no longer necessary or in the absence of legal obligations requiring its retention. Request the restriction of processing or object to it. Lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it). To exercise these rights, users can send a written communication to the Data Controller's email address listed in Section 1.

8. Changes to this Privacy Policy The Data Controller reserves the right to make changes to this privacy policy at any time, informing users on this page. Please consult this page periodically, referring to the last updated date indicated at the top.