Privacy policy
Last updated: 12 June 2026
This notice explains how personal data is processed when you use this site to inquire or book Casa Giorgio.
1. Data controller
Data controller: Antonio Pane, Italian tax code PNANTN76B26I862F, Via del Canovaccio, 84017 Positano, Italy.
Privacy contact: ciao@casagiorgiopositano.it
Website technical provider (FREDD Studios) may process data for hosting and security under a data processing agreement (Art. 28 GDPR) with the controller, where applicable.
2. Data, purposes, legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, country, stay dates, messages | Bookings, guest communication | Art. 6(1)(b) contract / pre-contract |
| Payment metadata (no full card numbers) | Stripe payment after date confirmation | Art. 6(1)(b) |
| Billing and tax records | Legal accounting obligations | Art. 6(1)(c) |
| ID data for police registration | Italian Alloggiati Web obligations | Art. 6(1)(c) |
| Technical logs, IP, essential cookies | Security and site operation | Art. 6(1)(f) / technical necessity |
| Analytics (if enabled with consent) | Aggregated site statistics | Art. 6(1)(a) consent |
3. Recipients and transfers
- Stripe (payments; possible transfers outside EEA with appropriate safeguards).
- Supabase (booking database, EU region where configured).
- Cloudflare (hosting/CDN and optional Web Analytics).
- Authorities where legally required.
4. Retention
- Tax/accounting: 10 years under Italian law.
- Bookings: contract period + up to 24 months support.
- Unsuccessful inquiries: deleted within 12 months.
5. Your rights
Access, rectification, erasure, restriction, portability where applicable, objection where applicable, withdraw consent. Contact ciao@casagiorgiopositano.it. Complaint to Italian Garante: www.garanteprivacy.it or your local EU authority.