Privacy policy — DueVenti

DueVenti attaches great importance to the protection of the personal data of its visitors and clients. This policy describes how your data is collected, used and protected, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

DueVenti — [address], 14051 Bubbio (AT), Italy.
Contact: info@dueventi.it

2. Data collected

Identity: first and last name
Contact details: email, phone
Stay details: dates, number of guests, message
Technical data: IP address, browser type (server logs)

3. Purposes

Reply to booking and contact requests
Manage the customer relationship before, during and after the stay
Comply with our legal and tax obligations

4. Legal basis

Processing is based on your consent (contact form), the performance of a contract (booking) and our legal obligations (invoicing).

5. Retention period

Unconverted contact requests: 3 years
Customer data (booking): 10 years (accounting obligation)
Technical logs: 12 months

6. Recipients

Your data is processed by DueVenti and its technical subcontractors: site hosting (Netlify), database (Supabase, European Union region), automatic email delivery (Resend) and mailbox (OVH). Some of these providers are based in the United States. No data is resold.

7. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to info@dueventi.it. You may also lodge a complaint with the Garante per la protezione dei dati personali (Italian supervisory authority).

8. Cookies

The site only uses technical cookies necessary for its operation. No advertising tracking cookies are placed without your consent.