Privacy policy

Cateno Costa

Südstraße 26

42103 Wuppertal

Deutschland / Germania

Tel. +49 163 630 19 54

Tel. +39 333 53 40 647

E-Mail: cateno.costa@gmail.com

We only process personal data where this is necessary to run this website, handle your request, carry out your stay or comply with legal obligations.

This website uses no analytics or advertising cookies and embeds no content from Google, Facebook or other third parties. Fonts are served from our own server. The map opens via a link to OpenStreetMap – only then is data sent to OpenStreetMap.

When you visit the website, our hosting provider processes technically necessary data (IP address, date and time, page requested, browser type). Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). Log files are deleted after 14 days at the latest.

Hosting: [name and address of the hosting provider with servers in the EU – to be added before launch]. A data processing agreement is in place with the provider.

For the price calculation we only process travel dates and number of guests; they are not stored.

When you send a request we process your name, email address, phone number, country, travel dates, number of guests and your message in order to handle the request, reserve an apartment and contact you (Art. 6(1)(b) GDPR – pre-contractual measures and performance of a contract).

We send you emails about the status of your request (receipt, confirmation, payment reminder). We do not send advertising.

You can pay the deposit by bank transfer or online by card. Card payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, which receives your payment details, email address and the amount; we never see your card details. Legal basis: Art. 6(1)(b) GDPR. Stripe may transfer data to the USA and is certified under the EU-US Data Privacy Framework. Privacy notice: stripe.com/privacy.

Under Italian law (Art. 109 TULPS) we must report the personal details of all guests, based on an identity document, to the Polizia di Stato via the “Alloggiati Web” portal within 24 hours of arrival. We also submit anonymised data (country of origin, number of nights) for official tourism statistics (ISTAT). Legal basis: Art. 6(1)(c) GDPR.

Online check-in (optional): you can send us the details and photos of your ID documents before arrival via your personal link. The photos are stored encrypted on our server, can only be viewed by us as hosts, are used exclusively for the registration described above and are deleted automatically the day after your departure – immediately if the booking is declined or cancelled. Legal basis: Art. 6(1)(c) GDPR together with your choice to use the online check-in; alternatively, simply show your IDs on arrival.

Requests that do not result in a booking are deleted no later than 12 months after the requested travel period.

Booking and invoice data are kept for as long as required by tax and commercial law in Germany and Italy (up to 10 years) and are then deleted or anonymised.

Your data is only processed by us as hosts, by the service providers named above (hosting, email delivery, Stripe) on our behalf and – where required by law – by Italian authorities. We do not pass on data for advertising purposes.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Just contact us.

You may also lodge a complaint with a data protection supervisory authority, e.g. the authority of North Rhine-Westphalia (Germany) or the Italian Garante per la protezione dei dati personali.

If you send us an enquiry about buying the building via the sale page, we process your name, email address, phone number, your details on budget and proof of funds and your message in order to contact you and prepare a possible viewing (Art. 6(1)(b) GDPR – pre-contractual measures). We only ask for financing documents in personal contact; nothing is uploaded via the website.

We delete this data as soon as it is no longer needed, at the latest 24 months after the last contact, unless a purchase contract is concluded.