Privacy Policy

1. Data Controller

The Data Controller, i.e. the entity responsible for decisions regarding the purposes, methods, and tools used for the processing of personal data, is Eleìra Luxury Accommodation, located at Via Cavour 5, 12060, Barolo CN, Tel. +39 338 188 1499, Email: eleira.barolo@gmail.com.

2. Personal Data Collected

When you make a booking or interact with our website, we may collect the following personal data:

• First name, last name
• Email address
• Phone number
• Arrival time and special requests
• Booking dates, number of guests
• Acceptance of terms and conditions

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Managing and confirming your booking
• Communicating with you regarding your stay (confirmations, reminders, cancellations)
• Processing payments and managing cancellation/no-show fees
• Complying with legal obligations (tax, public safety, tourism statistics)

4. Legal Basis

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to fulfil your booking.
• Legal obligation (Art. 6(1)(c) GDPR): compliance with tax, accounting, and public safety requirements.
• Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention and protection of property.

5. Third-Party Processors

To provide our services, your data may be shared with the following processors:

• Stripe (Stripe, Inc. — USA): payment processing. Stripe processes your payment information under its own privacy policy. Data transfers to the USA are covered by Stripe's Data Processing Agreement and Standard Contractual Clauses.
• Postmark (ActiveCampaign, LLC — USA): transactional email delivery (booking confirmations, reminders). Only your email address and name are shared. Transfers covered by Standard Contractual Clauses.
• Mapbox (Mapbox, Inc. — USA): interactive maps on our website. Mapbox may receive your IP address when the map loads. No personal data is actively shared by us.

6. Data Retention

Your personal data is retained for the duration necessary to fulfil the purposes described above. Booking data is retained for up to 10 years after checkout to comply with Italian tax and accounting obligations (Art. 2220 Civil Code). After this period, data is permanently deleted.

7. International Data Transfers

Some of our service providers are based in the United States. Data transfers to the USA are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection as required by Chapter V of the GDPR.

8. Your Rights

Under the GDPR (Articles 15–22), you have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Request erasure of your data (right to be forgotten)
• Restrict the processing of your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at <a href="https://www.garanteprivacy.it" target="_blank" class="underline">www.garanteprivacy.it</a>.

9. Cookies

This website uses only essential cookies necessary for its operation. For full details, please see our Cookie Policy.

10. Changes to This Policy

We may update this privacy policy from time to time. The date of the last update is indicated at the top of this page. We encourage you to review this policy periodically.