Privacy Policy and GDPR

Last Updated: 5/29/2026

Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR), this policy describes the processing of personal data of users of the casaprabi.it website.

1. Data Controller

The Data Controller is:
Mauro Mabboni
Via Legionari Cecoslovacchi 11, 38062 Arco (TN)
Email: casaprabi@gmail.com

2. Personal Data Collected

We collect and process the following personal data:

• Identification and contact data: name, surname, email address, phone number.
• Booking data: stay dates, accommodation preferences, number of guests.
• Navigation data: IP address, browser type, and data collected via cookies (details in the Cookie Policy).

3. Purposes and Legal Basis of Processing

The data provided will be processed for the following purposes:

• Booking management and answering requests: to fulfill pre-contractual and contractual obligations. (Legal basis: Art. 6(1)(b) GDPR - performance of a contract).
• Stay-related communications: to send useful information before and during the stay. (Legal basis: Art. 6(1)(b) GDPR).
• Tax and legal obligations: guest registration and accounting requirements. (Legal basis: Art. 6(1)(c) GDPR - legal obligation).
• Marketing and Promotions: sending newsletters and offers, only with explicit consent. (Legal basis: Art. 6(1)(a) GDPR - consent).

4. Data Retention

The collected data will be kept for the time strictly necessary to achieve the purposes for which they were collected:

• Data relating to bookings and billing are kept for 10 years for tax and legal obligations.
• Data processed for marketing purposes are kept until the revocation of consent by the data subject.

5. Data Transfer

Your personal data are processed within the European Union and will not be transferred to non-EU countries.

6. Rights of the Data Subject

In accordance with the GDPR (Arts. 15-22), you have the right to ask the Controller at any time for:

• Access to your personal data.
• The rectification or deletion of the same.
• The restriction or objection to the processing.
• Data portability.
• The revocation of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can write an email to: casaprabi@gmail.com.

7. Complaint to the Supervisory Authority

Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante Privacy) (www.garanteprivacy.it).