Privacy Policy
Version 1.0 · in force since 26 July 2026
Information notice on the processing of personal data, provided under Article 13 of Regulation (EU) 2016/679.
1. Data controller
The data controller is Chiara Tarantino, Italian tax code TRNCHR70S66G702J, based at Via Andrea Vaccà Berlinghieri 3, 56127 Pisa (PI), Italia, who operates the accommodation “Dimora Coccapani” (CIN IT050026C25IXUKRQV).
For any matter concerning personal data, and to exercise the rights set out in section 6, you may write to info@dimoracoccapani.com or call +39 338 878 4710.
No Data Protection Officer has been appointed, as the conditions making the appointment mandatory do not apply.
Legal basis: Art. 13(1)(a) and (b) Reg. EU 2016/679.
2. What data we collect, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, message and — where provided — arrival and departure dates and number of guests (contact form) | Replying to enquiries about availability and the stay | Pre-contractual measures taken at the data subject’s request — Art. 6(1)(b) |
| Data you send us directly by email, telephone or WhatsApp | Handling the conversation and following up on your request | Pre-contractual measures or performance of a contract — Art. 6(1)(b) |
| IP address, date and time of the visit, page requested, browser type (server logs) | Keeping the site running and secure, detecting anomalous use or attempted abuse | Legitimate interest in the security of the site — Art. 6(1)(f) |
The site uses no cookies and no analytics, profiling or advertising tools. Full details are given in the Cookie Policy.
Legal basis: Arts. 6 and 13(1)(c) Reg. EU 2016/679.
3. How long we keep the data
| Category | Retention | Reason |
|---|---|---|
| Enquiries sent through the form or by email that do not lead to a stay | Up to 24 months from the last contact | A reasonable period to follow up on the enquiry, consistent with the storage limitation principle — Art. 5(1)(e) |
| Correspondence relating to bookings actually made | For the duration of the relationship and thereafter for the periods required by law | Compliance with legal obligations relating to hospitality and administrative records — Art. 6(1)(c) |
| Server logs | For the technical period set by the hosting provider, normally limited to a few days or months | Security and diagnostic purposes — Art. 6(1)(f) |
Legal basis: Arts. 5(1)(e) and 13(2)(a) Reg. EU 2016/679.
4. Who processes the data besides the controller
Data is processed by the controller and may be processed by the following party, appointed as processor under Art. 28 of the Regulation:
| Party | Activity | Server location |
|---|---|---|
| Serverplan (Ergonet S.r.l.) | Website hosting and management of the domain mailbox | European Union (Italy) |
Data is never disclosed publicly, sold or transferred to third parties, and is not used for commercial purposes other than those stated. It may be disclosed to public authorities only where required by law.
Legal basis: Arts. 13(1)(e) and 28 Reg. EU 2016/679.
5. Transfers outside the European Union
No personal data is transferred to third countries or international organisations. The site is hosted on servers located in the European Union; typefaces are served directly from our own server and involve no connection to foreign providers; there are no embedded maps, videos or other third-party content.
Legal basis: Arts. 13(1)(f) and 44-49 Reg. EU 2016/679.
6. Your rights
You may exercise the following rights at any time by writing to info@dimoracoccapani.com. We reply without undue delay and in any case within one month of the request.
| Right | What it means | Reference |
|---|---|---|
| Access | Obtain confirmation of processing and a copy of your data | Art. 15 |
| Rectification | Have inaccurate data corrected or incomplete data completed | Art. 16 |
| Erasure | Have your data deleted, in the cases provided for by law | Art. 17 |
| Restriction | Ask for processing to be suspended pending verification | Art. 18 |
| Portability | Receive your data in a readable format or have it sent to another controller | Art. 20 |
| Objection | Object to processing based on legitimate interest, on grounds relating to your particular situation | Art. 21 |
Legal basis: Arts. 15-21 and 12(3) Reg. EU 2016/679.
7. Complaint to the supervisory authority
If you believe your data is being processed in breach of the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it), without prejudice to any other administrative or judicial remedy.
Legal basis: Art. 77 Reg. EU 2016/679.
8. Whether providing data is mandatory
In the contact form, name, email address and message are required: without them we cannot reply. Arrival and departure dates and the number of guests are optional and simply help us check availability more quickly; leaving them out has no consequence.
The checkbox to be ticked before sending confirms that you have read this notice; it is not consent to processing, which rests on the legal bases set out in section 2.
Legal basis: Art. 13(2)(e) Reg. EU 2016/679.
9. Automated decision-making
No profiling or automated decision-making producing legal effects or similarly significantly affecting individuals is carried out.
Legal basis: Arts. 13(2)(f) and 22 Reg. EU 2016/679.
10. How we protect the data
The site is served exclusively over an encrypted connection (HTTPS). The contact form stores no data on the server: the message is turned into an email and delivered to the controller’s mailbox, which is protected by private credentials. Access to the site’s management panel is limited to the controller and to those providing technical assistance.
Legal basis: Art. 32 Reg. EU 2016/679.
11. Cookies and browser storage
The site sets no cookies, neither its own nor third-party ones. It only uses temporary browser storage (sessionStorage) to remember that the map animation has already played during your visit: this is technical information containing no personal data, and it is cleared when you close the tab. Full details are in the Cookie Policy.
12. Changes to this notice
This notice may be updated to reflect changes in the law or in the services offered. The version in force is always published on this page, together with the date it took effect.
Legal sources cited
- Regulation (EU) 2016/679 (GDPR) — Arts. 5, 6, 12, 13, 15-22, 28, 32, 44-49, 77
- Italian Legislative Decree 196/2003 (Personal Data Protection Code), as amended by Legislative Decree 101/2018
This English text is a courtesy translation. In case of discrepancy, the Italian version prevails.