Book

Privacy policy

Sample text for the demo: the house, the owner and the contact details are made up.

This policy explains which personal data we collect when you visit demo.vegacreative.ai, book a stay or stay with us, why we collect it, how long we keep it and what your rights are. We have tried to keep it simple: if anything is unclear, just write to us.

Who handles your data

The data controller is Ilaria, owner (a made-up person) of the sole proprietorship that runs Le Sette Marogne.

  • Address: Via dei Marogni 7, Sorèl (VR), Italy
  • VAT number: 00000000000 · REA: VR-0000000 (made-up numbers)
  • Email: titolare@casa-demo.it
  • Phone and WhatsApp: +39 000 000 0173

We have not appointed a data protection officer (DPO): it is not required for a business like ours. For any question about your data, write to the email above.

What data we collect and why

1. When you book on our website

We collect your first name, surname, email, phone number, country of residence, dates of stay, number of guests and any notes you write to us. We need them to record the booking, confirm it, handle arrival, departure and any cancellation, and to contact you if needed.

Legal basis: performance of the accommodation contract (Art. 6.1.b GDPR).

2. Payment

You enter your card details directly in the booking system of AvaiBook, our property management software, and they never pass through our servers. AvaiBook uses them as a guarantee or for the payments set out in the booking conditions.

Legal basis: performance of the contract (Art. 6.1.b GDPR).

3. On arrival: guest registration

Italian law requires us to report the details of every guest to the police (Art. 109 of the Consolidated Public Security Act): first name, surname, sex, date and place of birth, citizenship and identity document details. To make this quicker we may photograph the document. The photos are encrypted and deleted within 48 hours, and the data sent to the police is deleted from our systems as soon as the transmission receipt arrives.

We also report to the Veneto Region, for official tourism statistics (ROSS 1000 / ISTAT), data such as citizenship or origin, age, sex and dates of stay, without names or documents.

Legal basis: legal obligation (Art. 6.1.c GDPR).

4. Offers and news, only if you choose

If you tick the box "I want to receive offers and news" when booking, we will use your email to send you offers and news from Le Sette Marogne a few times a year. It is optional, changes nothing about your booking, and you can unsubscribe at any time by replying to one of our emails or writing to us.

Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

5. When you contact us

If you contact us by email, phone or WhatsApp, we use the data you give us to reply.

Legal basis: pre-contractual steps you request, or our legitimate interest in replying (Art. 6.1.b and 6.1.f GDPR).

6. Bookings through other platforms

If you book through a platform such as Booking.com, the platform collects your data under its own privacy policy; we receive what is needed for your stay and handle it as described in points 1 and 3.

How long we keep it

  • Bookings and tax records: 10 years, as required by tax and accounting rules.
  • Photos of documents: 48 hours at most.
  • Data sent to the police: deleted from our systems after the transmission receipt.
  • Email for offers and news: until you withdraw consent, and no longer than 2 years after your last stay or contact.
  • Messages and contacts: as long as needed to reply and manage any stay.

Who else handles data on our behalf

We use a few providers that process data on our behalf, only for the purposes described here, as data processors (Art. 28 GDPR):

  • AvaiBook (Spain, EU): booking management, calendar and payments;
  • Vega Creative (Italy): technical management of the website and our systems;
  • Vercel (USA): hosts the website;
  • Supabase: the website database, hosted in London (United Kingdom, a country recognised by the European Commission as providing adequate data protection);
  • Hetzner (Germany, EU): the server that prepares the reports to the police and the Region;
  • Google (Ireland/USA): email and the business profile on Google.

When the law requires it, we pass data to the police and to the Veneto Region. We do not sell your data or share it with others for commercial purposes.

Transfers outside the European Union

Some providers (Vercel, Google) may process data in the United States. In these cases the transfer relies on the safeguards provided by the GDPR: the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Cookies and browser storage

Our website does not use profiling cookies or analytics tools. It only uses technical elements needed for it to work:

  • your browser's storage, to remember the booking in progress as you move between pages;
  • the language you chose;
  • a session cookie for the area reserved to the managers.

These technical elements do not require consent. The payment step is handled by the AvaiBook system inside our page: AvaiBook may use its own technical cookies, described in its privacy policy.

Your rights

At any time you can ask us to:

  • tell you what data we hold about you and give you a copy;
  • correct or complete it;
  • delete it, except data the law requires us to keep;
  • restrict its use, or object to processing based on our legitimate interest;
  • receive the data you gave us in a readable format (portability);
  • withdraw your consent to offers, without affecting processing already carried out.

Just write to titolare@casa-demo.it: we reply within one month.

If you believe your data is not being handled correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

If we change the way we handle data, we will update this page and the date below.

Last updated: 10 October 2026

Demo · casa inventata