Privacy and Cookie Policy
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and current national legislation
Last updated: September 2026
1. Data Controller and Contact Details
The Data Controller is L’essenza Chalet, located at Via San Pietro 8 A, Valdisotto, 23030, Italy.
To exercise your rights or for any clarification regarding the processing of personal data, you can contact the Data Controller at the following details:
- Postal Address: Via San Pietro 8 A, Valdisotto, 23030, Italy
- Privacy Email: essenzachalet@gmail.com
- Phone: +39 0342 970092
2. Categories of Processed Data, Purposes and Legal Bases
Personal data is collected directly from the user and processed for the following specific purposes:
| Purpose of Processing | Type of Data | Legal Basis (GDPR) |
|---|---|---|
| Management of Inquiries and Quotes: Responding to requests sent via form, email, or telephone. | First name, last name, email, phone number, stay dates, notes/preferences. | Performance of pre-contractual measures (Art. 6.1.b GDPR). |
| Booking and Stay Management: Conclusion and performance of the accommodation agreement. | Personal details, identity document details, payment/credit card details. | Performance of a contract (Art. 6.1.b GDPR). |
| Legal Obligations and Public Safety: Reporting guests to the Police authorities (Alloggiati Web) and tax/accounting compliance. | Personal details, identity document details, invoicing/VAT details. | Legal obligation (Art. 6.1.c GDPR; T.U.L.P.S. Art. 109). |
| Direct Marketing and Newsletter: Sending promotional offers, events, and updates. | First name, email address. | Explicit and optional consent of the data subject (Art. 6.1.a GDPR). |
| Website Security and Fraud Prevention: Monitoring the proper functioning of the web infrastructure. | IP addresses, system logs, navigation data, browser type. | Legitimate interest of the Controller (Art. 6.1.f GDPR). |
3. Data Retention Period
Collected data will be retained only for as long as strictly necessary to fulfill the purposes for which it was collected:
- Contractual, administrative, and accounting data: Retained for 10 years to comply with statutory tax and legal obligations.
- Police notification data (Alloggiati Web): Deleted immediately after electronic transmission or retained according to the provisions of competent authorities.
- Contact data / quotes not followed by booking: Retained for a maximum of 24 months from the request.
- Marketing / newsletter data: Retained until consent is revoked (opt-out) by the user or for a maximum of 24 months from the last active interaction.
4. Data Recipients and Transfers Abroad
Collected data will never be disseminated and may only be communicated to authorized third parties or designated Data Processors (pursuant to Art. 28 GDPR):
- Technical service and web hosting providers, booking engine providers, and web developers;
- Tax, administrative, and legal consulting firms;
- Public Safety Authorities and Tax Authorities for regulatory obligations.
Data is generally processed within the European Economic Area (EEA). Should the transfer of data to non-EU countries become necessary for certain services (e.g., newsletters, cloud platforms), this will occur solely to countries deemed adequate by the European Commission or subject to the adoption of Standard Contractual Clauses (SCC) approved by the Commission.
5. Cookie Policy and Platform List
Cookies are small text files that visited websites send to the user’s terminal. In compliance with the Italian Data Protection Authority Guidelines of June 10, 2021, this website uses the following types of cookies:
A. Technical Cookies (Necessary)
These do not require prior user consent as they are essential to enable navigation and access to core website features (e.g., session management, saving cookie consent preferences, booking engine functionalities).
B. Analytical and Statistical Cookies
The site uses tools such as Google Analytics 4 with IP address masking/anonymization. Being deprived of direct identification capabilities, they are assimilated to technical cookies.
C. Third-Party and Profiling Cookies (Prior Consent Required)
Activation of these tools occurs only if the user explicitly consents via the cookie consent banner:
- Google Maps: For displaying the interactive map of the property’s location.
- Social Widgets / YouTube: For embedding multimedia content.
Managing preferences: Users may at any time review or modify their consent by clicking the link in the footer (“Manage Cookie Preferences“) or by configuring their web browser settings directly (Chrome, Firefox, Safari, Edge).
6. Rights of the Data Subject (Arts. 15-22 GDPR)
As a data subject, you are guaranteed all rights provided by European Regulation, which you may exercise at any time free of charge:
- Right of Access (Art. 15): Obtain confirmation as to whether or not personal data concerning you is being processed and receive a copy thereof.
- Right to Rectification (Art. 16): Obtain the correction of inaccurate data or the integration of incomplete data.
- Right to Erasure / Right to be Forgotten (Art. 17): Request the deletion of your personal data in cases provided by law.
- Right to Restriction of Processing (Art. 18): Obtain the temporary restriction of processing under certain conditions.
- Right to Data Portability (Art. 20): Receive personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): Object at any time to the processing of data based on legitimate interest or for direct marketing purposes.
- Withdrawal of Consent: Revoke previously given consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you can send a formal request to: essenzachalet@gmail.com.
Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with the **Italian Data Protection Authority** (www.garanteprivacy.it) if you believe that the processing violates current regulations.