Privacy policy

Last updated: 12 July 2026

What data we collect

• Personal and contact details provided when booking: first name, last name, email, home address.
• Stay details: check-in and check-out dates, number of guests (including under-14s), unit booked.
• Payment-related data: amount and outcome. Card details never pass through or are stored on our site: they are handled directly by Stripe, our payment provider.
• Minimal technical data automatically collected by the server (IP address, browser type), for security reasons, as with any website.

Why we use it

• To manage the booking — confirm it, communicate any changes or cancellations, manage the stay. Legal basis: performance of a contract.
• To comply with legal obligations specific to a hospitality business: reporting guest data to public safety authorities (Portale Alloggiati) and collecting the municipal tourist tax. Legal basis: legal obligation.
• To reply to requests sent via email or WhatsApp.

How long we keep it

For the duration of the stay and for the period afterwards required by tax and accounting obligations (up to 10 years), unless different terms are set by law.

Who we share data with

• Stripe, for secure card payment processing. Stripe processes this data as an independent controller: see its own privacy policy for details.
• The site's hosting and email provider (OVH), where the database and email accounts reside.
• The competent public authorities, when required by law (police, municipality).

We never share guests' personal data with booking portals (Booking.com, Airbnb): the technical connection with the software we use to sync availability only exchanges a booking code, no personal data.

Some of these providers (e.g. Stripe) may process data outside the European Economic Area; in that case the transfer relies on standard contractual clauses approved by the European Commission or equivalent safeguards under the GDPR.

Cookies

The site uses technical cookies, necessary for it to function (they do not require consent under current regulations), and Google Analytics and Google Ads cookies, activated only if you consent via the banner shown on your first visit. We don't use any other third-party profiling cookies.

• Admin session: active only for the property manager while logged into the reserved area, expires when the browser closes.
• Site language (lh_lang): remembers whether you chose to browse in Italian or English, lasts 1 year.
• Google Analytics and Google Ads (active only with your consent): collect anonymous usage statistics (pages visited, where visitors come from) and let us measure the effectiveness of our advertising campaigns. You can withdraw consent at any time by clearing this site's browsing data in your browser.

The "Surroundings" section shows an interactive map that loads images from OpenStreetMap/CARTO: this involves sending your IP address to that provider only for the time needed to show the map, with no further profiling on our part.

Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing, portability, or object to processing, by writing to info@lavandahouse.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) if you believe the processing violates the GDPR.

Updates

This notice may be updated over time: the version in force is always the one published on this page.