Privacy notice
Last updated: 16 October 2026 · version to be completed
This notice describes the data used when you browse Casa Maia’s website or enquire about a stay, under Articles 12 and 13 of Regulation (EU) 2016/679.
1. Controller and contacts
Casa Maia is the name of the accommodation in Vaste di Poggiardo (LE). Data controller: Anna Domenica Vizzino. Postal address: Via Enrico Toti, 111, 73037 Poggiardo (LE), Italy. For personal-data enquiries, write to info@casamaia.eu or call +39 327 676 5137.
2. Data and purposes
| When | Which data | Purpose and legal basis |
|---|---|---|
| You browse the pages | IP address and technical connection data that the hosting service may log. | Providing and protecting the pages; legitimate interest in security and service continuity within applicable limits (GDPR Art. 6(1)(f)). |
| You request availability | Dates, apartment, guest count, message and contact details you choose to share. | Responding and preparing a requested proposal; pre-contractual steps (GDPR Art. 6(1)(b)). |
| An enquiry becomes a booking | Data needed for the stay, subsequently collected through the agreed channel. | Contract performance and applicable legal obligations (GDPR Art. 6(1)(b),(c)). Any further processing must be explained at collection. |
| You exercise your rights | Your request and only the data necessary to identify you. | Handling requests and complying with data protection obligations (GDPR Art. 6(1)(c)). |
3. How the form works
The form prepares a message in your browser. The website code does not send the fields to a Casa Maia database: WhatsApp opens with the text in the link request; email opens your mail application. The operator receives the message when you send it through your chosen channel. The channel provider may process data as soon as the service opens, under its own privacy notice.
Providing data is optional; without dates, guest count or a useful contact, a proposal may be impossible to prepare or send. This form does not subscribe you to newsletters or promotional messages. Do not enter health data, identity documents or unnecessary information in free-text fields.
4. Recipients and external services
Enquiries are accessible to the controller and people authorised to manage hospitality. Data may be processed by hosting and email providers, necessary technical support and the services you use to contact us, according to their respective roles. Received messages are not intended for publication.
WhatsApp is an external service: see its privacy notice. Maps, restaurants and provider links open external sites only when selected. Casa Maia’s code does not automatically load interactive maps, videos or social widgets. Photos and fonts are hosted with the pages.
5. Hosting and transfers
The test copy on the IONOS system domain uses the owner’s IONOS Web Hosting Plus service. The separate private chatgpt.site preview uses Sites and may require authentication. Before final publication on casamaia.eu, the hosting and email providers’ contractual entities, agreements, relevant subprocessors, log retention and possible transfers outside the EEA must be verified. Email and WhatsApp may also involve processing outside the EEA: destinations and safeguards require provider checks; data must not be assumed to remain in Italy or the EU.
6. Retention
Period confirmed by the owner: Enquiries that do not become bookings: up to 12 months after the last contact, unless further retention is demonstrably necessary. Bookings, tax, administrative duties and legal claims follow their applicable retention periods. Technical logs and backup retention depend on the activated services and must be checked before final publication.
7. Your rights
Where applicable, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Write to info@casamaia.eu; only information needed to verify your identity will be requested if necessary. You may lodge a complaint with the Italian Data Protection Authority or the competent authority.
8. Automated decisions and updates
The website code does not profile visitors or make automated decisions on stay enquiries: the operator prepares replies personally. This notice must be updated if tools, purposes or providers change.