Privacy Policy

1. Data Controller

The Data Controller is Mariangela Alioto, Italian Tax Code LTAMNG74P47H199O, for Stella Placidia.

2. Data processed

Browsing data

Hosting and information systems may process technical information required for the operation and security of the website, including IP address, request time, requested resource, browser information and technical logs.

Contact enquiries

The Contact form prepares a message in the visitor's own email application. The information entered is not automatically submitted to the Stella Placidia server; it is transmitted when the visitor chooses to send the email.

Availability and bookings

Check-in and check-out dates and number of guests may be processed to check availability and calculate prices.

When direct booking and online payment are enabled, the guest's name, email address, phone number, amount, booking status and technical transaction references may also be processed.

Stella Placidia does not store full payment card details. Online payments, when available, are handled through Stripe.

3. Purposes and legal bases

• replying to enquiries;
• performing requested pre-contractual and contractual activities;
• checking availability and calculating prices;
• managing bookings, stays and payments;
• complying with administrative, tax and legal obligations;
• protecting the security and integrity of the systems.

Depending on the activity, processing is based on pre-contractual or contractual measures, compliance with legal obligations or legitimate interests relating to security and protection of the Controller's rights.

The website does not carry out advertising profiling or automated decision-making producing legal effects for visitors.

4. Recipients and service providers

Where necessary, personal data may be processed by providers supporting hosting, email, IT maintenance and other technical services.

When direct payments are enabled, Stripe processes information required for payment processing under its own terms and privacy notice.

Booking.com and Airbnb calendars are read server-side through iCal feeds to identify unavailable dates. This does not send Stella Placidia visitors' browsing data to those platforms.

Data may also be disclosed to competent authorities where required by law.

5. External services

Website fonts are hosted locally and the normal display of the website does not require an automatic connection to Google Fonts.

Google Maps and other external services are reached only when the visitor chooses to follow the relevant link or activate the related functionality. The external provider's privacy information then also applies.

The same principle applies to Stripe checkout and other third-party websites.

6. Retention

Personal data is retained for no longer than necessary for the purposes for which it was collected.

Booking, administrative and tax records are retained for the periods required by applicable law and, where necessary, for the establishment or defence of legal claims.

Technical logs are retained for limited periods proportionate to security, diagnostics and abuse-prevention requirements.

7. Data subject rights

Where provided by the GDPR, data subjects may request access, rectification, erasure, restriction, portability and may object to processing.

Requests may be sent to mariangela@stellaplacidia.it .

Data subjects may also lodge a complaint with the Italian Data Protection Authority .

8. Updates

This notice may be updated when website functions, service providers or processing activities change.

For information about cookies, see our Cookie Policy.