Privacy notice
This notice explains how we handle the personal data of people who visit the Portico Garibaldi site, write to us or book the apartment (EU Regulation 2016/679, "GDPR").
Data controller
The controller is Pietro Versaldo, who runs Portico Garibaldi as a private individual. For any request about your data write to privacy@porticogaribaldi.it, or on WhatsApp or call +39 333 842 7333.
What data we collect
- Contact form: full name, email, phone if given, dates and number of guests if given, message text, page language.
- Booking: full name, email, phone, stay dates, number of guests, arrival time and requests if given, language, amounts paid and booking status. Payment takes place on Stripe's secure page: card details never reach our server. If you choose the deposit, Stripe keeps the card to charge the balance on the date shown in the booking.
- Guest details required by law: before arrival the identity document details of all guests are needed for the mandatory report to the police. You enter them directly on Vikey's service, with the personal link Vikey sends you: our site neither receives nor stores them.
- Offers: your email, only if you tick the dedicated box (it is not pre-ticked and is not needed to book).
- Browsing: the server records the technical information needed for operation and security (IP address, requested page, time). The codes in personal links (guide, booking) are not recorded.
The site uses no profiling cookies and no analytics tools that track visitors, and contains no third-party scripts.
Why we process it and on what basis
| Purpose | Legal basis |
|---|---|
| Replying to messages sent through the contact form or on WhatsApp | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Managing the booking, payment and stay | Performance of the contract (Art. 6(1)(b)) |
| Reporting guests to the police (Alloggiati Web), applying the tourist tax, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Protecting the site from abuse and keeping it running | Legitimate interest (Art. 6(1)(f)) |
| Sending offers reserved for guests | Consent (Art. 6(1)(a)), which you can withdraw at any time with the link in every email |
The data requested for a booking is necessary: without it we cannot confirm the booking. We do not take decisions based solely on automated processing.
How long we keep it
- Contact form messages: 12 months.
- Incomplete bookings (payment never received): 12 months.
- Bookings and payments: for the period required by tax law for a private individual's rental income, as a rule until 31 December of the fifth year after the year of the tax return.
- Guest identity document details: kept by Vikey for the period required by law; our site does not have them.
- Offers list: until you unsubscribe; after that your email is deleted within 30 days.
- Server technical logs: 30 days.
- Backups (encrypted): 30 days; deleted data also disappears from backups within that time.
Data is deleted automatically when these periods end.
Who we share it with
Data is never sold or used for advertising. These providers process it on our behalf, only for the purposes above:
- Stripe (Stripe Payments Europe, Ireland), for payments.
- Resend (United States), email delivery service, for booking confirmations and messages about the stay.
- OVHcloud (France), hosting provider that runs the site and the database.
- Vikey, for guest registration (ID documents for Alloggiati Web) and the information to access the flat: to register the booking it receives name, email, dates and number of guests; you enter your document details directly on Vikey's service.
- Telegram, for notifications to the host: messages contain only the booking number, dates of stay, number of guests, arrival time and amounts, never name, email, phone or the text of messages.
We also share it with the authorities when the law requires it: the police (Alloggiati Web), the City of Turin for the tourist tax, tax authorities.
The site shares with Airbnb only the booked dates, with no names or other data, to avoid double bookings. PriceLabs, which we use for prices, receives no guest data.
Resend is based in the United States: the data needed to send emails (address and message content) is transferred under the European Commission's standard contractual clauses, included in its data processing agreement.
Your rights
You can ask at any time to access your data, have it corrected or deleted, restrict processing, receive it in a portable format, and object to processing based on legitimate interest. If you consented to offers, you can withdraw consent at any time with no effect on your booking. We reply within one month.
You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
To exercise your rights, write to privacy@porticogaribaldi.it, or on WhatsApp or call +39 333 842 7333.
Updates
This notice may change, for example if our providers change. The version in force is always this page.