Version of 23 August 2026
Who processes your data
The data controller is SANBRO srl, via Roma 16, 75011 Accettura (MT), Italy, VAT 01434240774. For anything concerning your data, write to contatti@dimoraloscalzo.it.
We have not appointed a Data Protection Officer, because we do not fall within the cases where the GDPR requires one.
What we collect
Only what you type into the form on this page: full name and email, which are required because without them we cannot reply, and then phone, dates of interest, number of guests and message, which are optional and simply let us answer you more precisely.
Alongside your enquiry we keep proof of the consent you gave us: date and time, the version of this notice, the language of the page, and a hashed fingerprint of your IP address. The fingerprint cannot be reversed, does not let us recover your address, and exists only to limit automated submissions.
We use no analytics, we profile nobody, and this page loads no third-party resources: none of your data reaches Google, social networks or any other outside service.
Why, and on what legal basis
- To reply to you. Legal basis: your consent, Article 6(1)(a) GDPR. That is the box you tick in the form, and it is required, because without it we cannot handle the enquiry.
- To send you updates about the Dimora and about events in the village, but only if you tick the second box, which is optional. If you leave it unticked you receive nothing but our reply.
The two boxes are deliberately separate: you can agree to the first and refuse the second, and your enquiry is still handled.
How long we keep it
- Enquiries: twenty-four months from the last contact, then deleted.
- Updates: until you withdraw consent. Withdrawing is one click at the foot of every email, or one line written to contatti@dimoraloscalzo.it.
- Proof of consent: for as long as the data it refers to, because its purpose is to show that consent was given.
Who sees it
Only us. We do not sell, share or publish your data.
The data sits on our hosting provider’s servers, which processes it on our behalf as a processor under Article 28 GDPR. We transfer no data outside the European Economic Area.
Your rights
At any time you may ask us to access your data, correct it, erase it, restrict its processing, receive it in a portable format to take elsewhere, and object to processing. You may also withdraw your consent whenever you wish, without affecting the lawfulness of what was done before you withdrew it.
Write to contatti@dimoraloscalzo.it. We reply within one month.
If you believe the processing breaches the Regulation you may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or go to court.
No automated decisions
We make no automated decisions about you and we do no profiling. A person reads your enquiry.
If we change this notice
We publish the updated version on this page and change its date. The version you accepted stays recorded with your enquiry, so we always know which text you said yes to.