Privacy Policy

Privacy & Cookie Policy

At Dimora Arco di Mezzo we care about your privacy. This policy explains which personal data we collect through our website and during your stay, why we collect it, how long we keep it and what rights you have, in accordance with the EU General Data Protection Regulation (GDPR – Regulation EU 2016/679) and Italian data protection law.

1. Data Controller

For any question about this policy or about your personal data, you can contact us at the email address above.

2. Personal Data We Collect

1. Contact form: name, email address, phone number (optional) and the content of your message.
2. Booking requests: name, email address, phone number, dates of stay, number of guests, notes and the booking details you send us.
3. Guest registration: on arrival, Italian law requires us to collect the details of an identity document (ID card or passport) of each guest.
4. Invoicing data: the data needed to issue the invoice for your stay, which we send to you by email. No payments are made through this website: booking requests are sent by email and confirmed directly by us.
5. Technical data: when you visit the website, our hosting provider automatically records technical data such as your IP address, browser type and date and time of access, for security and to keep the website working properly.

We do not use your data for profiling and we do not sell it to third parties.

3. Why We Use Your Data and Legal Basis

Purpose	Legal basis (GDPR)
Replying to your requests sent through the contact form, email, phone or WhatsApp	Steps taken at your request before entering into a contract (Art. 6.1.b)
Managing your booking and your stay	Performance of a contract (Art. 6.1.b)
Registering guests with the police authorities (Alloggiati Web), tourist tax where applicable, invoicing and tax / accounting obligations	Compliance with a legal obligation (Art. 6.1.c)
Protecting the website and forms from spam and abuse	Legitimate interest (Art. 6.1.f)

Providing your data is necessary to reply to your requests and to manage your stay. Without the data required by law (such as identity documents), we cannot accommodate you.

4. How Long We Keep Your Data

1. Contact requests that do not lead to a booking: for the time needed to reply, and in any case no longer than 12 months.
2. Booking data: for the duration of the contractual relationship and, where required, for the period set by Italian tax and accounting law (up to 10 years).
3. Identity document details: transmitted to the police authorities as required by law and not kept by us longer than necessary.
4. Technical data: for the time set by our hosting provider for security purposes.

5. Who Receives Your Data

Your data is processed by the Data Controller and may be shared only with:

1. Aruba S.p.A., our website hosting provider (servers in the EU);
2. Google, for our email service (Gmail) and for the Google reCAPTCHA anti-spam service;
3. WhatsApp (Meta), only if you choose to contact us via WhatsApp;
4. Police authorities, through the Alloggiati Web portal, as required by Italian law;
5. accountants and tax advisors, only where necessary;
6. public authorities, when required by law.

These providers act as data processors or as independent controllers, each for their own part.

6. Data Transfers Outside the EU

Some services provided by Google and Meta (WhatsApp) may involve the transfer of data to the United States. These transfers are protected by the EU-U.S. Data Privacy Framework and by the Standard Contractual Clauses approved by the European Commission.

7. Your Rights

At any time you can ask us to:

1. access your personal data and receive a copy of it;
2. correct inaccurate or incomplete data;
3. delete your data, where there is no legal obligation to keep it;
4. restrict or object to the processing of your data;
5. receive your data in a structured, commonly used format (data portability).

To exercise your rights, write to arcodimezzo@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Cookie Policy

8. What Cookies Are

Cookies are small text files that a website stores on your device to make it work properly or to collect information about how it is used.

9. Cookies We Use

Our website uses only technical cookies, which are necessary for the website to work. We do not use profiling or marketing cookies, and we do not use analytics tools to track your behaviour. For this reason, no consent banner is required.

Cookie / service	Purpose	Duration
WordPress and booking system	Keep the website and the booking process working (for example, remembering the dates selected during a booking)	Session or a few days
Google reCAPTCHA	Protect our forms from spam and automated abuse. reCAPTCHA is subject to Google's Privacy Policy and Terms of Service	Up to 6 months

10. Managing Cookies

You can delete or block cookies at any time from your browser settings. Please note that blocking technical cookies may prevent some parts of the website, such as the booking system or the contact form, from working properly.

11. Changes to This Policy

We may update this policy from time to time. The latest version is always available on this page.

Last updated: October 2026