Privacy notice

Last updated: 12 October 2026

This is a courtesy translation of the Italian notice. If the two versions differ, the Italian version prevails.

This page explains what personal data the Le Terrazze sul Mondo website collects, why, and for how long, as required by Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

Giuseppe Scarci
Via Giudice Montea 12, 70024 Gravina in Puglia (BA), Italy
Email: leterrazzesulmondo@gmail.com

2. What data we collect

• "Request availability" form: full name, email, arrival and departure dates, number of guests, preferred room and the message you write. Name and email are needed to reply to you; the other fields are optional.
• Phone, WhatsApp, email: if you contact us directly, we keep your number or address and the content of the conversation.
• Stay data, if you book: first name, surname, date and place of birth, citizenship and the details of an identity document. We only ask for these when you confirm a booking. If you also book for other people, their data reaches us through you: for families it is enough for the person booking to give them to us, and we ask you to let those travelling with you know about this page.
• Technical browsing data: the site is hosted by GitHub Pages, which, like any website, records visitors' IP addresses in its own logs. We do not have access to them.

The site does not use cookies, has no analytics or advertising tools, and does not load fonts, maps or content from external services: the fonts are hosted on the site itself. For this reason no cookie banner appears.

3. Why we use it and on what legal basis

• Replying to your request for availability or information and, if you wish, completing the booking. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Registering guests and reporting them to the police authorities (Questura). The law (Art. 109 of the Italian Consolidated Act on Public Security) requires anyone running an accommodation facility to identify guests and to report their data to the State Police within 24 hours of arrival, through the Alloggiati Web portal. Legal basis: legal obligation (Art. 6(1)(c)).
• Meeting other legal obligations linked to the stay, for example tax obligations. Legal basis: legal obligation (Art. 6(1)(c)).

Providing your name and email in the form is necessary for us to reply. Providing the stay data is required by law: without it we cannot host you. We do not use your data for advertising or newsletters. We do not make automated decisions about you.

4. Who receives the data

• Formspark (Trampoline Software SRL, Belgium), which forwards the form requests by email. The data stays within the European Economic Area (Ireland and Germany).
• Google (Gmail), the email service we use to receive and reply.
• GitHub, which hosts the site.
• WhatsApp (Meta), if you write to us on that channel.
• State Police, through the Alloggiati Web portal, for the data of guests who stay.

Formspark in turn uses technical providers, listed on its sub-processors page. Your data is not sold or passed on to anyone else. If you book through Booking.com or Airbnb, that data is processed by the respective platforms according to their own privacy notices.

5. Transfers outside the European Union

Form requests stay within the European Union. Google (email) and GitHub (site hosting) are based in the United States: the transfer takes place with the safeguards provided by the GDPR, namely the adequacy decision of the EU-US Data Privacy Framework or the standard contractual clauses.

6. How long we keep it

Requests that are not followed by a booking are deleted after 12 months. Formspark separately keeps the IP address of whoever submits the form for 12 months.

For identity documents: after reporting the data to the Questura, we delete the digital data and destroy any paper copies. We keep only the receipt confirming the report, issued by the portal, for 5 years as proof of compliance. The reported data then remains for 5 years in the Ministry of the Interior's systems.

For this reason we do not ask you for photos or scans of documents via WhatsApp or email, and we ask you not to send them: we will explain how to hand them over securely. Data strictly linked to the stay is kept for the time required by other legal obligations.

7. Self check-in and identification

The property can be reached with an access code, but the identification of guests required by law remains mandatory before entry. For this reason, when you book, we explain how to complete the registration.

8. Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its use, object to its processing or receive it in a portable format. Write to the controller's email address: we reply within 30 days. If you believe your data is being processed improperly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. Other information

Your data may be used to defend our rights in court, or in the stages leading up to it, in case of abuse. We may also be required to disclose it at the request of public authorities.

10. Changes

If anything changes in the way the site processes data, we will update this page and the date at the top.