Privacy Policy

Notice under articles 13 and 14 of EU Regulation 2016/679 (GDPR).
Last updated: May 2026.

Data controller

Grazia di Croce di Frank Christian Meyenborg
Via Wyatt 33
22017 Menaggio (CO), Italy
Email: info@graziadicroce.it

Categories of data processed

This website is an informational showcase without contact or booking forms. Data processed directly on the site is limited to:

• Navigation data: IP address, browser type, operating system, pages visited, date and time. Collected automatically by the hosting provider (Hostinger) in server logs for security and anonymous statistics.
• Analytics cookies (only with consent): if accepted, Google Tag Manager and Hotjar collect anonymised statistical and interaction data. Rejection is always possible and does not affect site usage.
• Contact data: if you write to us by email, we process the information you voluntarily provide (name, email address, message content) to respond to your enquiry.

Bookings are made exclusively through Airbnb. Booking data is processed by Airbnb Ireland UC under its own privacy notice.

Legal basis for processing

• Article 6(1)(a) consent of the data subject — for analytics cookies;
• Article 6(1)(b) performance of a contract — for responding to enquiries or bookings;
• Article 6(1)(f) legitimate interest — for server logs and site security.

Recipients of data

Data may be communicated to:

• Hostinger International Ltd. (hosting provider, registered in Lithuania, EU) — server logs.
• Google Ireland Ltd. (Google Tag Manager, only with consent) — web analytics tools.
• Hotjar Ltd. (based in Malta, EU, only with consent) — user behaviour analytics.
• Airbnb Ireland UC — only if you book through the Airbnb link on the site.

All providers above operate within the European Union or provide adequate transfer safeguards under Articles 44-49 GDPR.

Retention period

• Server logs: maximum 30 days.
• Analytics cookies: maximum 14 months (Google Analytics) / 12 months (Hotjar).
• Email correspondence: the time necessary to reply to the enquiry plus statutory limitation periods.

Your rights

In accordance with the GDPR you have the right to:

• access your data (Article 15);
• request rectification (Article 16);
• request erasure (Article 17);
• request restriction of processing (Article 18);
• exercise the right to data portability (Article 20);
• object to processing (Article 21);
• withdraw consent at any time (Article 7(3)), without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, write to info@graziadicroce.it.

Right to lodge a complaint

You have the right to lodge a complaint with the Italian data protection authority — Garante per la protezione dei dati personali (www.garanteprivacy.it) — or the supervisory authority in your country of residence, should you consider the processing to be in breach of the GDPR.

Cookies

For details on the cookies used and to change your preferences see Cookie settings.

Automated decision-making

The site does not perform automated decision-making or profiling within the meaning of Article 22 GDPR.