Last updated: 20 October 2026
1. Data controller
The data controller is Alessio Tortorelli, who runs the tourist rental (locazione turistica) «L'Ulivo D'oro» at Via Michelangelo Buonarroti 26, 74014 Laterza (TA), Italy (CIN IT073009C200098818).
Privacy contacts: email lulivodorolaterza@gmail.com.
The controller has not appointed a Data Protection Officer: for a business of this size, which does not process data on a large scale, this is not required (Article 37 GDPR).
2. What data we process
a) Browsing data
As with any website, the systems that run this site automatically receive some technical data sent by your browser: IP address, date and time of the request, page requested, response code, browser type and operating system. This data is processed by the hosting provider to deliver the pages and protect the site from abuse and attacks.
b) Data you give us when you contact us
«Write to us» form. The form on the Contact page only prepares a WhatsApp message: from your name, your message and, if you provide them, the dates of your stay and the number of guests, it writes the text and opens WhatsApp. The site does not receive or store this data. The message only reaches us if you tap Send in WhatsApp; from then on we process it in order to reply. Before WhatsApp opens, we ask you to confirm that you have read this notice: this is an acknowledgement, not consent, because the data is needed to reply to your request.
Phone, WhatsApp and email. If you choose to call us, message us on WhatsApp or email us, we will process the data you provide in order to reply. These buttons only open the app on your device: no data passes through the site.
c) Usage statistics
The site currently uses no statistics tools and sets no analytics cookies. If they are enabled in the future, they will only start with your consent and this notice will be updated.
d) Interactive map (only with your consent or on request)
The Google map is loaded only if you allow it in the cookie banner («Google map» or «Accept») or press the «Load the Google map» button. At that point your browser connects to Google's servers, which receive your IP address and may set their own cookies.
e) Bookings on platforms
Online bookings are made on third-party platforms (such as Booking.com), which process your data as independent controllers under their own privacy notices. We receive from the platform the data needed to manage your stay. Data collected on arrival (for example identity documents that must be reported to the police under Article 109 of the Italian TULPS) does not pass through this site and is processed to comply with a legal obligation (Art. 6(1)(c) GDPR).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the site and keeping it secure (browsing data) | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Replying to your requests (including those sent with the contact form) and managing direct bookings | Pre-contractual measures or performance of a contract at your request (Art. 6(1)(b) GDPR) |
| Showing the interactive Google map | Consent given in the cookie banner or by clicking the button, which you can withdraw at any time (Art. 6(1)(a) GDPR) |
| Complying with legal obligations (tax, accounting, public security) | Legal obligation (Art. 6(1)(c) GDPR) |
| Defending the controller's rights in case of disputes | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
4. How long we keep data
- Browsing data: for as long as strictly necessary to deliver and protect the site, under the policies of the hosting provider, Cloudflare, Inc. (servizio Cloudflare Pages).
- Messages and requests: for as long as needed to reply and in any case no longer than 12 months; if the request leads to a booking, for the period required by civil and tax law (normally 10 years).
- Consent cookie: 6 months, after which you will be asked again.
5. Who receives the data
Data is not published. For the purposes above, it may be processed by:
- Cloudflare, Inc. (servizio Cloudflare Pages), hosting and content delivery provider, as data processor (Art. 28 GDPR);
- Google, for the interactive map, only if you choose to load it, as an independent controller of the data collected through the service;
- Booking.com B.V. and other booking platforms, as independent controllers for bookings made through them;
- Google Ireland Limited (Gmail), provider of the mailbox where we receive the messages you send us, as data processor;
- WhatsApp Ireland Limited, as an independent controller, if you choose to contact us via WhatsApp;
- advisers (such as our accountant) and public authorities, where required by law.
6. Transfers outside the European Union
Some providers (Cloudflare, Google) may process data in the United States or other non-EU countries. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for participating companies, and/or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR).
7. Providing your data
Giving us your data when you contact us is optional, but without it we cannot reply. In the contact form, name and message are required; the other fields are optional.
8. Your rights
At any time you can exercise the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. You can withdraw your consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before withdrawal, including via the «Manage cookies» link at the bottom of every page. We do not carry out automated decision-making or profiling.
To exercise your rights, write to lulivodorolaterza@gmail.com.
9. Complaints
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it (opens in a new tab)), or with the supervisory authority of the EU country where you live or work.
10. Changes
This notice may be updated. The date of the last update is shown at the top.