Privacy policy

This policy explains how Casa Montecastelli handles personal data when you visit this website, contact us or stay at Apartment Terra.

Who we are

Casa Montecastelli, Frazione Montecastelli 181, 06019 Umbertide (PG), Italy. VAT no. (Partita IVA) 03989160548. For questions about your data, email yvette@montecastelli.casa.

This website

• This website uses no cookies, no statistics and no tracking. It loads no fonts, scripts or embeds from other companies.
• Like every web server, our hosting keeps technical log files (IP address, date and time, requested page, browser). We use these only for security and to solve technical problems. They are deleted automatically after a short period.
• Links to Le Case di Dorrie, Glamping Luna del Monte, WhatsApp and our booking page take you to other websites, which have their own privacy policies.

When you contact us

If you email us or send a WhatsApp message, we use your name, contact details and message only to answer you. WhatsApp is a service of Meta; its own privacy policy applies to the messages you send through it. We keep this correspondence for as long as needed to help you, and for no more than two years afterwards.

When you stay at Apartment Terra

You book Terra through our booking page (guests.montecastelli.casa). For a booking we process:

• name, email address and telephone number, to handle your booking and contact you about your stay;
• date of birth and identity document details of all guests, because Italian law requires us to register every guest with the police (Questura);
• payment details for the deposit and the rest of the booking amount, as required by tax and accounting rules.

We process this data to perform our agreement with you and to meet our legal obligations.

How long we keep data

• Contact and booking details: for the duration of your booking and up to two years afterwards.
• Identity details and invoices: as long as Italian law requires (for accounting data usually ten years).

Who receives your data

We do not sell or trade personal data. We only share it with:

• authorities, where the law requires it, such as the guest registration with the police;
• service providers who help us run our business (hosting, email, booking software, accounting), under a confidentiality agreement and only for that purpose.

If a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the standard contractual clauses of the European Commission.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, correct or delete your data, to restrict or object to its processing, and to receive your data in a portable form. Email us to use these rights. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority in your own country.

Changes

We update this policy when our practices change. The date at the top shows the latest version.