Privacy Policy

Last updated: March 2025

1. Data Controller

Personal data is processed by Francesco Grasso, owner of Casa G&G (hereinafter "Controller").

2. Data collected

This website does not collect data through contact forms, does not use profiling cookies, and does not include any traffic analytics tools.

The personal data processed is limited to information that you voluntarily provide when contacting the host by phone, email or WhatsApp to request information. This may include: full name, phone number, email address.

3. Purposes and legal basis

Data is processed for:

  • Managing request for informations — legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the request of the data subject).
  • Compliance with legal obligations (e.g. guest registration with public security authorities) — legal basis: Art. 6(1)(c) GDPR.

4. Retention period

Data is retained for the time strictly necessary to request the informations and, thereafter, for no longer than 12 months from the date of the last communication, unless a longer retention period is required by law.

5. Recipients and data transfers

Data is not shared with third parties for marketing or profiling purposes. It may be shared with service providers (e.g. email providers) under GDPR-compliant contractual arrangements.

The website uses Google Maps (Google LLC, Mountain View, CA, USA) for the interactive map. The map — and the resulting transfer of data to Google — is loaded only after the user's consent via the cookie banner. Google's processing is governed by Google's Privacy Policy.

6. Your rights

Under Arts. 15–22 of EU Regulation 2016/679 (GDPR), you have the right to:

  • Access (Art. 15) — confirm whether data is being processed and obtain a copy
  • Rectification (Art. 16) — correct inaccurate or incomplete data
  • Erasure (Art. 17, "right to be forgotten")
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time (Art. 7(3)), without affecting the lawfulness of prior processing

To exercise your rights, send a request to: france.gra98@gmail.com

7. Supervisory authority

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante): www.garanteprivacy.it