Notice provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 and to Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Version of 13 September 2026.
The data controller is La Casa della Marmotta, having its seat at Via Priesnig 76, 33018 Tarvisio (UD), Italy.
National identification code of the accommodation: CIN IT030117C2499RMDKD.
Contact details for the exercise of data subject rights and for any communication concerning the processing: lacasadellamarmotta@gmail.com; telephone +39 370 133 0665.
No Data Protection Officer has been appointed, the conditions set out in Article 37 of the Regulation not being met.
a) Request for a quotation or for information. Data processed: name, e-mail address, telephone number where provided, dates and number of guests indicated, content of the message. Purpose: responding to the request and preparing the quotation. Legal basis: Article 6(1)(b) of the Regulation, steps taken at the request of the data subject prior to entering into a contract. Provision is optional; failure to provide the name and e-mail address prevents any reply.
b) Conclusion and management of the tourist letting contract. Data processed: identification data of the lessee, data relating to the stay, payment details. Purpose: performance of the contract and accounting and tax compliance. Legal bases: Article 6(1)(b) and (c) of the Regulation.
c) Notification of guests to the public security authority. Data processed: identification data of each person accommodated, taken from a copy of a valid identity document. Purpose: compliance with the notification obligation under Article 109 of Italian Royal Decree 773/1931. Legal basis: Article 6(1)(c) of the Regulation. Provision is mandatory; failure to provide prevents the stay.
d) Tourist tax. Data processed: number and details of guests liable to the tax, nights of stay. Purpose: obligations towards the Municipality of Tarvisio under its regulations. Legal basis: Article 6(1)(c) of the Regulation.
e) Measurement of website access. Data processed: pseudonymous identifier generated by means of a non-reversible hash function from the IP address and the user agent, with a key that changes daily; page consulted; language; device time zone, from which the country is derived; referring site or service; device type; time spent; sections consulted. The IP address is not retained. Purpose: statistical measurement of the operation of the website. Legal basis: Article 6(1)(f) of the Regulation, the controller's legitimate interest in verifying the operation of its own website.
The website uses no cookies, neither technical nor profiling cookies, and employs no other technology for storing information or gaining access to information stored in the user's terminal equipment within the meaning of Article 122 of Legislative Decree 196/2003.
No components, resources or services are loaded from third-party domains.
The website contains hyperlinks to third-party sites. The controller is not responsible for the processing carried out by such sites, to which their respective notices apply.
Data may be disclosed to: Google Ireland Limited, as processor for the electronic mail service; Hetzner Online GmbH, as processor for hosting services; PromoTurismoFVG, limited to enquiries forwarded by it to the controller.
Data are further disclosed, in compliance with legal obligations, to the Police Headquarters of Udine and to the Municipality of Tarvisio.
Data are not disseminated nor transferred to third parties for purposes other than those stated.
Data are processed on systems located within the European Union. Any transfer to third countries by the processors indicated takes place on the basis of the safeguards provided for in Chapter V of the Regulation, including the standard contractual clauses adopted by the European Commission.
Requests for quotations and related replies: twenty-four months from the last contact.
Contractual, accounting and tax data: ten years, pursuant to Article 2220 of the Italian Civil Code and applicable tax legislation.
Copies of identity documents: thirty days from the end of the stay.
Website access measurement data: twenty-four months.
Processing is carried out by electronic means and with technical and organisational measures appropriate to ensure the security of the data.
Replies to requests for information are prepared with the assistance of automated tools. Every communication is reviewed and approved by the controller before it is sent. No decisions based solely on automated processing are taken, and no profiling within the meaning of Article 22 of the Regulation is carried out.
The data subject has the right to request from the controller access to the personal data concerning him or her, rectification, erasure, restriction of processing, and has the right to data portability, in the cases and within the limits laid down in Articles 15 to 20 of the Regulation.
The data subject also has the right to object at any time, on grounds relating to his or her particular situation, to processing based on the controller's legitimate interest, pursuant to Article 21 of the Regulation.
Requests are to be addressed to lacasadellamarmotta@gmail.com. A reply is provided within one month of receipt, extendable by two months in the cases provided for in Article 12(3) of the Regulation.
A data subject who considers that the processing of data concerning him or her infringes the Regulation has the right to lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or to bring proceedings before the competent courts.
The controller reserves the right to amend this notice. Amendments are published on this page together with the date of the update.