Privacy Policy

Data controller

The data controller is Residence Gonda e Giuliano SAS di Brotto Chiara & C., with registered office at Via Cenghia 23/C, 31030 Borso del Grappa (TV), VAT number 05603560268 (IT05603560268). To exercise your rights or for any information about the processing of personal data, you can write to [email protected] or call +39 331 7677683. The accommodation activities take place at the Residence in Via Cenghia 23/C, the Dependance in Via Giovanni da Semonzo 12 and the Countryside in Via Cenghia 43/a, Borso del Grappa (TV).

What data we process and why

We process the data you voluntarily provide when you contact us by email, telephone, WhatsApp or social networks: name, contact details, stay dates, number of guests and the content of your message. We also process technical data necessary for browsing (for example IP address, device, browser, pages visited) and information about the closure of the cookie notice. The data is used to:

• respond to information requests and manage availability;
• manage bookings and stays when the request results in a booking handled by the controller;
• comply with administrative, accounting and tax obligations;
• ensure the security of the website and prevent abuse;
• display maps through Google Maps, as described in the Cookie Policy.

Booking requests

Availability and booking requests can be sent by email or WhatsApp using the contact details provided. The website does not currently use an external booking portal. If a dedicated booking system is introduced in the future, this policy will be updated.

Legal bases for processing

Processing is based, depending on the case, on:

• performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) to respond to requests and manage bookings;
• compliance with legal obligations (Art. 6(1)(c) GDPR), in particular tax and accounting obligations;
• the controller’s legitimate interest (Art. 6(1)(f) GDPR) in website security, abuse prevention and managing communications;
• the data subject’s consent (Art. 6(1)(a) GDPR), where required, for optional services. For the loading of Google Maps, the website relies on its legitimate interest in providing the map functionality; you can prevent loading by blocking third-party cookies in your browser.

Processing methods and security

Data is processed with manual and electronic tools, with access limited to authorised staff and suppliers. We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss or unlawful use. There are no automated decision-making processes or profiling activities.

Recipients of the data

Data is not sold or disseminated. It may be processed by:

• website hosting and security providers (Cloudflare, Inc.);
• Google LLC for displaying maps through Google Maps, when the map is loaded;
• providers of the communication services used (email, telephone, WhatsApp/Meta) through which you contact us;
• appointed professionals and consultants (for example the accountant) and public authorities, where required by law.

Transfers outside the EU

The website uses providers based in the United States (Cloudflare, Inc. and Google LLC). Transfers take place on the basis of adequacy decisions, the EU-US Data Privacy Framework where applicable, or standard contractual clauses approved by the European Commission. For information on the safeguards adopted, you can write to [email protected].

Data retention

Data is retained for the time necessary for the purposes described above and in any case:

• information requests not followed by a booking: maximum 24 months;
• contractual, accounting and tax data: for the period required by law (normally 10 years);
• technical browsing data and security logs: maximum 30 days, unless necessary to investigate unlawful acts;
• cookie notice closure: maximum 6 months, unless you delete it manually from your browser.

Your rights

You may exercise at any time the rights provided by Articles 15-22 of Regulation (EU) 2016/679:

• access to your data and information about the processing;
• rectification, erasure and restriction of processing;
• objection to processing based on legitimate interest;
• data portability;
• withdrawal of consent, without affecting the lawfulness of processing already carried out.

Complaints and contacts

Requests can be sent to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome; www.garanteprivacy.it) or with the supervisory authority of your country.

Third-party channels and reviews

If you contact us via WhatsApp, Facebook or Instagram, your data is also processed by the respective operators under their privacy policies. The reviews displayed on the website are published by guests on Booking.com and shown for information purposes with name and country. For removal or information, you can write to [email protected].

Updates to this policy

This policy was updated on 22 October 2026. Any changes will be published on this page.