Skip to content
Residenza Cà d'Massëu
DE / EN
Enquire

Privacy notice

As of: 5 November 2026

Controller

Ute de Vargas Aichbichler
Valle San Giovanni 68
14042 Calamandrana (AT), IT
Email: booking@cadmasseu.com
Private holiday let (no VAT number).

1. Overview

We process personal data only within the limits of applicable law (GDPR, Italian data-protection law). This website uses self-hosted fonts (no Google Fonts) and loads no tracking or marketing scripts.

2. Hosting and server logs

The site is hosted by Vercel Inc. On access, technically necessary data is processed (e.g. truncated/processed IP address, date/time, requested URL, referrer, user agent) to deliver and secure the site. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data-processing agreement is in place; EU Standard Contractual Clauses apply to any third-country transfer.

3. Booking enquiry

When you use the enquiry form, we process the data you provide (name, email, optional phone number, arrival/departure, number of guests, optional message) to handle and answer your request. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR). Enquiry data is stored in our database (Upstash, provided via Vercel, EU region) and sent to us by email (Resend); a reply or confirmation email may be sent to you. We retain the data as long as needed to process your request and any resulting contract, then delete it unless statutory retention applies.

4. Email communication

We use Resend (EU region) to send notifications and confirmations; a data-processing agreement is in place. Our mailbox booking@cadmasseu.com, through which we receive and answer enquiries, is hosted by Zoho (EU region). The above legal bases apply.

5. Availability sync

To avoid double bookings, we sync occupancy with booking portals (Booking.com B.V., FeWo-direkt/Vrbo) via iCal: we receive their bookings and publish an iCal feed so they can block the same dates. For direct bookings made through this website, that feed names the guest. If you book through a portal, its privacy policy applies; we receive the data needed to provide your stay. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

6. Payments

Where we offer an online deposit, it is processed via Stripe Payments Europe, Ltd. (Dublin, Ireland). You enter your payment details directly with the payment provider; we do not receive full card data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Card payments offered on site are handled via SumUp (SumUp group, licensed as an e-money institution in the EU). You enter your card details directly at the payment terminal; SumUp processes the payment data as an independent payment service provider, and we do not receive full card data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

7. Local browser storage (no tracking cookies)

This site sets no tracking or marketing cookies. For convenience we use only technically necessary local storage (localStorage), e.g. to remember that you dismissed a notice and to keep a started enquiry draft. This data stays in your browser and is not transmitted to us. The protected admin area uses a technically necessary session cookie; this does not affect site visitors.

8. Web analytics

This site performs no web analytics and collects no usage statistics.

9. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Contact booking@cadmasseu.com. You may lodge a complaint with a supervisory authority; in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).

10. TLS encryption

This site uses TLS encryption to protect data in transit.

11. Data processors (overview)

12. Currency

This notice carries the date shown above and may be updated if the legal situation or the services used change.