Privacy Policy

Last updated: 20 October 2026

This policy explains how we handle the personal data of people who visit www.casafiorindo.com, get in touch with us or make a booking, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).

1. Data controller

Agriturismo Casa Fiorindo
Via San Filippo 34, 30020 Meolo (VE) – Italy
VAT No. 02046270278
Email: info@casafiorindo.com – Phone: +39 335 120 82 90

We have not appointed a Data Protection Officer (DPO), as this is not required for our business. If you have any questions about privacy, please email us at the address above.

2. What data we process and why

a) Browsing data

Like any website, our server automatically records some technical information about visits: IP address, date and time, the page requested, and the type of browser and operating system. We need this to run the site, keep it secure and detect any misuse.

• Legal basis: our legitimate interest in running the website and keeping it secure (Art. 6(1)(f) GDPR).
• Retention: for a limited period, in line with the hosting service’s log rotation, unless needed to investigate a crime.

The website does not use any analytics, profiling or behavioural advertising tools. For information on cookies, please see our Cookie Policy.

b) Availability requests and enquiries

When you fill in the “Check availability” form, email us, call us or message us on WhatsApp, we process the information you give us: first and last name, email, phone number, arrival and departure dates, number of adults and children, children’s ages, preferred apartment and any message. Your name and email are needed so that we can reply; everything else is optional.

• Purpose: to answer your request, check availability and send you a quote.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Where it is stored: requests sent through the form arrive in our email inbox and are saved in the private area of the website, which only we can access.
• Retention: for as long as needed to handle your request and, if no booking follows, for no more than 24 months after our last contact.

To protect the form from spam, the website keeps an encrypted (unreadable) form of the sender’s IP address for one hour, so it can limit repeated submissions from the same device. No captcha or external services are used.

c) Bookings and your stay

Online bookings are made through the Slope booking engine, which opens on an external page (booking.slope.it) when you click “Book”. The details needed for the booking – and, where applicable, for payment or a guarantee – are collected there, and Slope processes them on our behalf as a data processor.

• Purpose: to manage your booking and stay, and to meet related legal obligations, such as reporting guest details to the police (Art. 109 of the Italian Consolidated Law on Public Security), official tourism statistics, tax and accounting requirements and, where applicable, the tourist tax.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
• Retention: for the duration of the relationship and then for the periods required by law (for example, 10 years for tax and accounting records).

3. Who can access your data

Your data is processed by the data controller and its authorised staff. It may also be processed on our behalf, and only for the purposes described above, by the following providers acting as data processors:

• Digitalianlab S.r.l. – website development, technical management and hosting;
• Aruba S.p.A. – email service;
• Slope – online booking engine;
• tax and accounting advisers, for legal requirements.

Data may be disclosed to public authorities where required by law. It is never sold or passed on to third parties for marketing purposes, and it is not made public.

4. Third-party services

• Google Maps – on the Contact page the map is only loaded if you click “Show map”. From that moment, Google Ireland Ltd may collect data such as your IP address and set its own cookies, as described in its privacy policy. Google may transfer data to the United States under the EU-U.S. Data Privacy Framework.
• WhatsApp, Facebook and Instagram – the website only contains links to these services, with no embedded buttons or content. If you use them to contact us, your data is also processed by Meta Platforms Ireland Ltd in line with its privacy policy.
• Virtual tour – the 360° tour is hosted on our own website and does not use external services.

5. Transfers outside the European Union

The website and our email are hosted on servers located in the European Union. Data may only be transferred to non-EU countries if you use the third-party services listed in section 4, with the safeguards set out in Articles 44 and following of the GDPR.

6. Your rights

At any time you can ask to access, correct or delete your data, restrict its processing, object to processing based on our legitimate interest, and receive your data in a structured format (data portability), within the limits of Articles 15–22 GDPR. To exercise your rights, simply email info@casafiorindo.com – we will reply within one month.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority in the country where you live.

7. Children

The contact form is intended for adults. Information about children (such as their age) is only collected when provided by a parent or guardian, so that we can offer suitable accommodation.

8. Changes to this policy

We may update this policy, for example when we add new services or the law changes. The date of the latest update is shown at the top of this page.