Legal

Privacy Policy

Last updated: 27 July 2026

This policy explains what personal data we collect when you visit this website or send us an enquiry, why we collect it, how we look after it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and Italian data-protection law.

01 Who we are

La Casa di Aldo is a privately let holiday house in the province of Alessandria, Piemonte, Italy. For the purposes of the GDPR, the data controller is the owner of La Casa di Aldo.

For any question about this policy or about your personal data, you can reach us at [email protected].

02 What we collect

Information you give us. When you complete the enquiry form, you provide the details you choose to enter: your first and last name, your email address, your preferred arrival and departure dates, the number of guests, the occasion, and anything you write in the message field. You are not obliged to provide any of it; without at least a name, an email and a message, however, we cannot reply to you.

Information collected automatically. Like any website, when a page is served our hosting provider records limited technical data such as your IP address, browser type, and the date and time of the request. This is used to deliver the site and keep it secure, and is not used to identify you personally.

Local storage. The site stores two small technical values in your browser: your chosen language and whether you have already seen the opening animation. These stay on your device, are not transmitted to us, and are not used to track you. The site sets no advertising or analytics cookies.

03 Why we use it, and our legal basis

  • To answer your enquiry and discuss a possible stay — legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).
  • To deliver the website and keep it secure — legal basis: our legitimate interest in running a safe, functioning site (Art. 6(1)(f) GDPR).
  • To comply with any legal or accounting obligation that may arise if a booking goes ahead — legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

We do not use your data for automated decision-making or profiling, and we do not sell it to anyone.

04 Who else processes it

We keep the number of parties who touch your data to a minimum. To run the site and receive your enquiry we rely on:

  • Web3Forms — the service that delivers the enquiry form to our inbox. The details you submit pass through it purely so the message reaches us.
  • Cloudflare — our hosting and content-delivery provider, which serves the site and protects it against abuse.
  • Our email provider — where your enquiry arrives and is read and stored.

Each acts as a processor on our behalf, or as an independent controller for its own infrastructure. Some of these providers may process data on servers outside the European Economic Area; where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

05 How long we keep it

We keep enquiry messages only for as long as needed to deal with your request and, if a stay follows, for as long as the booking relationship and any related legal or tax obligations require. If your enquiry does not lead to a booking, we delete it within a reasonable period. You can ask us to erase your data sooner at any time.

06 Your rights

Under the GDPR you have the right to:

  • ask for a copy of the personal data we hold about you (access);
  • have inaccurate data corrected (rectification);
  • have your data deleted (erasure);
  • restrict or object to how we use it;
  • receive the data you gave us in a portable format;
  • withdraw any consent you have given, at any time, without affecting processing already carried out.

To exercise any of these, write to [email protected]. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, if you believe your data has been handled improperly.

07 Keeping your data safe

Your enquiry travels over an encrypted (HTTPS) connection and is kept in accounts protected by the usual technical and organisational measures. No method of transmission over the internet is ever completely secure, but we take reasonable care to protect the information you send us.

08 Children

This site is intended for adults planning a stay. We do not knowingly collect personal data from children. If you believe a child has sent us their data, please contact us and we will delete it.

09 Links to other sites

Our footer links to our profiles on Instagram and Airbnb. Once you follow those links you are on their platforms, governed by their own privacy policies, over which we have no control.

10 Changes to this policy

If we change the way we handle personal data, we will update this page and revise the date shown at the top. We encourage you to review it from time to time.

Note for the site owner: this policy reflects how the site currently works (an enquiry form delivered via Web3Forms, hosting on Cloudflare, email received in your mailbox, no analytics or advertising cookies). If you later add analytics, a newsletter, online payments, or any other tool that handles visitor data, this page must be updated to match. For full legal certainty, and to add your formal identity as data controller (name or company, and a registered contact), have it reviewed by a professional. This text is provided as a solid, honest starting point, not as legal advice.