Last updated: July 9, 2026
Privacy Policy
This notice describes how Casa Madrigale processes the personal data of anyone who visits this site, sends a booking request or gets in touch, under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is — to be defined —, registered office at — to be defined —, VAT number 02096700782.
For anything concerning your personal data write to info@casamadrigalepraia.it or call +39 348 8820644. No Data Protection Officer has been appointed, as the conditions of art. 37 GDPR do not apply.
2. What data we collect
We collect only what we need to answer you and host your stay.
- Data you give us: name, email address, phone number and any notes, when you fill in the booking request form.
- Direct contact data: the email address or phone number you use to write or call us.
- Data collected automatically: our hosting provider's logs record your IP address, the date and time of the request, the page requested and your browser type. They keep the site secure and working.
The site currently runs no newsletter sign-up. We do not process special categories of personal data (art. 9 GDPR) and we do not knowingly collect data from children under sixteen.
3. Why we process it, and on what legal basis
- To answer your booking or information request and to host your stay. Legal basis: steps taken at your request prior to entering into a contract and, once confirmed, performance of that contract (art. 6.1.b GDPR).
- To keep the site secure and working, and to prevent abuse. Legal basis: our legitimate interest (art. 6.1.f GDPR).
- To meet tax and accounting obligations, and to report guest details to the Italian public security authorities as required of accommodation providers. Legal basis: legal obligation (art. 6.1.c GDPR).
Providing the fields marked as required in the form is necessary for us to reply: without them we cannot process your request.
4. Cookies
This site uses a single technical cookie and no analytics or profiling tools. The details are in the Cookie Policy.
5. Who we share data with
Your data is never sold, traded or disclosed to third parties for marketing. It may be processed on our behalf and on our instructions by the following parties, appointed as processors under art. 28 GDPR:
- Vercel Inc., which hosts the site and keeps its technical logs.
- The email service provider through which we receive and send messages.
- Professionals and advisors assisting us on accounting, tax and legal matters.
Data may also be disclosed to public authorities where the law requires it, including the mandatory reporting of guests staying at accommodation facilities.
6. Transfers outside the European Economic Area
The site's typefaces are hosted on our own servers: your browser never contacts Google Fonts, and no browsing data reaches Google while you visit these pages.
Some providers may process data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision of the European Commission (art. 45 GDPR) or on standard contractual clauses (art. 46 GDPR). Write to info@casamadrigalepraia.it for a copy.
7. How long we keep it
- Booking requests that did not lead to a stay: twelve months from the last contact.
- Data relating to completed stays: ten years, to meet civil, accounting and tax obligations.
- Server technical logs: up to twelve months.
Once those periods lapse the data is erased or irreversibly anonymised, unless the law requires us to keep it longer.
8. Your rights
At any time you have the right to:
- know which of your data we process and obtain a copy of it (art. 15 GDPR);
- have inaccurate or incomplete data corrected (art. 16 GDPR);
- ask for its erasure, when we no longer have grounds to keep it (art. 17 GDPR);
- ask that processing be restricted (art. 18 GDPR);
- receive the data you gave us in a machine-readable format and pass it to another controller (art. 20 GDPR);
- object to processing based on our legitimate interest (art. 21 GDPR);
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights write to info@casamadrigalepraia.it. We reply within one month, extendable by two further months in particularly complex cases.
9. Complaint to the supervisory authority
If you believe the processing of your data breaches the GDPR you may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the Member State where you live or work.
10. Changes to this notice
We may update this notice to reflect changes in how we process data or in the law. The version in force is always the one published on this page. Last updated: 2026-07-09.