Privacy and cookies

How we handle your data

Privacy notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 16 October 2026.

1. Who is responsible for your data

The data controllers are Vanessa Cappetti and Marco Papini, private individuals who jointly run the holiday homes in Sambuca Val di Pesa, Barberino Tavarnelle (Florence), Italy, presented on this website: CIN IT048054C2HLH3RFZS (Splendido giardino nel Chianti and Chianti in Love) and CIN IT048054C25SCTGM3N (Sotto il cielo del Chianti).

Because they decide together how and why your data is used, they are joint controllers (Article 26 GDPR). In practice you can contact either of them, and exercise your rights with respect to either of them, by writing to info@ledimoredelchianti.it: your message reaches both. We have no Data Protection Officer, because the law does not require one for our activity.

2. What data we process, why, and for how long

a) Availability requests. If you write to us through the form, by email or on WhatsApp, we process the data you give us: name, email or phone number, dates, number of guests, pets, message. We use it to reply and to make you an offer. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). If no booking follows, we keep it for up to 30 days after our last contact and then delete it.

b) Stays and bookings. If your request becomes a stay, we process the guest data needed to host you and to meet our legal duties: personal details and information from your identity document, which Italian law requires us to report to the police within 24 hours of arrival through the “Alloggiati Web” portal (Article 109 of the Italian Public Security Law, TULPS), tourist tax where due, tax and accounting records, and statistics for the tourism authorities. Legal basis: the accommodation contract (Article 6(1)(b)) and legal obligations (Article 6(1)(c)). We do not ask for photos of documents by WhatsApp or email: we check them on arrival. We do not keep copies: if a copy reaches us anyway, we delete it right after the data has been sent through Alloggiati Web, and we keep only the receipt issued by the portal, for five years, as proof that we complied (as clarified by the Italian data protection authority in its note of 29 April 2026). No law requires us to keep contact details and messages about your stay: we delete them within 30 days of departure (the time needed to settle any loose ends, such as forgotten items or payments), except what is needed for accounting. Accounting and tax records are kept for 10 years.

If you book through an online booking platform, the platform processes your data as an independent controller under its own privacy policy. We receive the data needed for your stay and handle it as described here.

c) Protecting our rights. In case of a dispute, we may keep the relevant communications for as long as needed to establish or defend a legal claim, within the limitation periods (legitimate interest, Article 6(1)(f)).

d) Browsing data. The website is hosted by Netlify, which, like any hosting service, records some technical data about each visit (IP address, page requested, date and time, browser type) to keep the site running and protect it from abuse. Legal basis: our legitimate interest in the security and operation of the website (Article 6(1)(f)). The provider keeps this data for a limited period under its own privacy policy. We do not use it to identify you.

e) Google Maps. The Google map is blocked until you consent: by pressing “Accept” on the banner, “Accept and load Google Maps” in the map panel, or switching on “Google maps” under “Customise”. Until then the website does not contact Google. After that, Google Ireland Limited receives your IP address and may use cookies, under its own privacy policy: we are joint controllers with Google for collecting and transmitting this data through our site; for any further use Google is an independent controller. Legal basis: your consent (Article 6(1)(a)). You can withdraw it at any time from “Cookie preferences” in the footer of every page: the map will no longer be loaded. The “Open in Google Maps” button takes you off this site, straight to Google's app or website.

3. Cookies and similar tools

This website uses no cookies of its own and no analytics, advertising or profiling tools. On your first visit it shows a banner with two categories: Necessary (always on) and Google maps (optional, off until you accept). You can accept, reject or choose with “Customise”, and change your mind at any time from the “Cookie preferences” link in the footer.

When you make a choice, we remember it for 6 months in your browser (localStorage), so we do not ask again on every page. It contains only your choice and the date, no personal data. This is technical storage that does not need consent (Article 122 of the Italian Privacy Code and the Garante's cookie guidelines of 10 June 2021). Until you make a choice, the website stores nothing on your device. The only third-party service is the Google map described above. The illustrated maps and the fonts are hosted on our own site and do not call outside services.

4. Who we share your data with

We do not sell or publish your data. It may be shared with: the website hosting provider (Netlify, Inc.); the email provider of info@ledimoredelchianti.it; WhatsApp Ireland Limited, if you write to us on WhatsApp (an independent controller with its own privacy rules); any tax or accounting advisers who help us, if we use them; and public authorities when the law requires it (police, tax agency, municipality, tourism bodies). Providers that process personal data on our behalf, such as our website hosting provider, are bound by a data processing agreement under Article 28 GDPR.

Transfers outside the European Union. Some providers (Netlify, Google, WhatsApp) belong to groups based in the United States. Transfers take place with the safeguards required by the GDPR: the European Commission's adequacy decision on the EU-US Data Privacy Framework, or its standard contractual clauses.

5. Whether you have to give us your data

To answer a request we need at least a name and a way to reach you. For a stay, the data the law requires is mandatory: without it we cannot host you. Everything else, such as the free-text message, is optional.

6. Automated decisions and profiling

We do not profile you and we make no decisions based on automated processing.

7. Your rights

At any time you can request access to your personal data, rectification, erasure, restriction of processing and data portability, where applicable, and you can object to processing based on legitimate interests (Articles 15–21 GDPR). You can withdraw your consent to Google Maps at any time from “Cookie preferences” in the footer of every page (Article 7(3)); this does not affect the lawfulness of processing carried out before the withdrawal. Write to info@ledimoredelchianti.it and we will reply within one month (Article 12(3)). If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your own country.

8. Security and updates

The website opens only over a secure connection (HTTPS). We take reasonable steps to protect the data we receive, by email or on WhatsApp, from unauthorised access. If we change the way we handle data, we will update this page and the date at the top.

9. Credits

Maps. Original drawing in the style of the Catasto Generale della Toscana (the Tuscan land survey), with data © OpenStreetMap contributors (ODbL). Elevation: Terrain Tiles (Mapzen, AWS Open Data), produced using Copernicus data and information funded by the European Union (EU-DEM layers) and SRTM data courtesy of the U.S. Geological Survey. The outlines of the S. Paolo barn and of Case Capanne were measured on the Catasto Generale della Toscana (Regione Toscana, CASTORE project).

Photos. The owners' archive, from the listings of the three homes. Typefaces. Ortica (Collletttivo, SIL OFL) and Erode (Fontshare).