Pursuant to EU Regulation 2016/679 (GDPR), this document describes how the personal data of users visiting and using the website of the accommodation facilities managed by De Carolis Gloria are processed.

1. Data controller
De Carolis Gloria
VAT 08338440723
Via Don Lorenzo Milani 1, 70044 - Polignano a Mare (BA)
Email: gloria99dc@gmail.com
Telephone: +39 3317993201

2. Type of data collected
The following personal data may be collected through the site:

• Identification and contact details (name, surname, email, telephone number) voluntarily provided via the contact form;
• Navigation data collected in an anonymous and aggregate form (e.g. IP addresses, site usage data, technical and analytical cookies);
• Data transmitted to third parties if the user uses external links to online booking platforms (e.g. Booking.com, Airbnb, etc.).

3. Purpose of processing
The data collected are processed for the following purposes:

• Responding to enquiries received via the contact form;
• Providing support for bookings or facility-related requests;
• Improving the user experience and monitoring the proper functioning of the site;
• Fulfil any legal obligations.

4. Methods of processing
The data is processed in a lawful, correct and transparent manner, mainly using IT and telematic means, taking appropriate technical and organisational measures to ensure its security.

5. Legal basis of processing
The treatment is based:

• on the user's consent, expressed through voluntary submission of the contact form;
• on the fulfilment of legal or contractual obligations possibly related to the requests received.

6. Data recipients
The data may be processed exclusively by the owner and authorised parties, or by external providers (e.g. hosting services, CMS platforms such as WordPress) for purposes strictly related to the management of the site. The data will not be disclosed or transferred to third parties for commercial purposes.

7. Transfer to third countries
Data is not transferred outside the European Economic Area, except in cases where the user interacts with external booking platforms that also operate outside the EU (e.g. Airbnb, Booking). In such cases, please refer to their respective privacy policies.

8. Data retention
Data provided via contact forms will only be stored for as long as necessary to respond to the user's request and, in the case of contractual relations, to fulfil legal obligations.

9. Rights of the data subject
The user has the right to:

• access their data;
• request their rectification or cancellation;
• restrict or oppose processing;
• lodge a complaint with the Data Protection Authority.

To exercise these rights, the user may contact the Controller at the above-mentioned email address.

10. Cookies
The site may use technical and analytical cookies. For more details, please consult the special Cookie Policy.