Last updated: 29 October 2026
This notice explains how we process the personal data of visitors to www.sappada.info and of people who contact us for information or to book the Olbe and Poch apartments, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. The Italian version of this notice is the legally binding one.
Data controller
Sergio Benedetti, Borgata Granvilla 102, 33012 Sappada (UD), Italy
Email: benedetti@sappada.info · WhatsApp: +39 349 8675819
What data we collect
- Data you send us through the contact form, by email or on WhatsApp: first and last name, email, phone number, the apartment and dates you are interested in, number of guests and any other information you choose to give us.
- Browsing data: the systems that run the website automatically record some technical data, such as IP address, browser type, pages visited, date and time. They are used only to operate and secure the website.
Why we use it and on what legal basis
- To answer your requests and handle any booking: the legal basis is the pre-contractual steps and the contract you request (Art. 6(1)(b) GDPR).
- To meet legal obligations related to your stay, for example tax rules and registering guests with the authorities: the legal basis is a legal obligation (Art. 6(1)(c) GDPR).
- To protect the website and the form from spam and abuse: the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for advertising, we do not sell it and we do not profile you. We will not send you newsletters without your explicit consent.
How long we keep it
- Requests for information without a booking: up to 24 months, so that we can reply to you later as well.
- Data related to a stay: for as long as the law requires (10 years for tax documents).
- Technical browsing data: only as long as strictly necessary for the security of the website.
Who may process the data
The data is processed by the controller. To run the website we rely on a few providers, who act as processors or as independent controllers:
- Aruba S.p.A. (Italy): website hosting and email service.
- Cloudflare, Inc.: the Turnstile service, which protects the contact form from spam by checking that a person is filling it in. It may process technical data such as IP address and browser information.
- WhatsApp Ireland Ltd.: if you choose to message us on WhatsApp, your data is also processed under WhatsApp’s privacy policy.
Some of these providers may transfer data outside the European Union, in particular to the United States. In these cases the transfer is based on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
The data is not disclosed to anyone else, unless required by law or by an authority.
Cookies
The website uses only technical cookies that are necessary for it to work and do not require your consent:
- WordPress technical cookies: used to run the website, for example for the administrator login.
- Cloudflare Turnstile: spam protection for the contact form, necessary for security.
We do not use statistics, profiling or advertising cookies. The links to Google Maps and WhatsApp open those services, which have their own privacy and cookie policies. You can always delete cookies in your browser settings.
Your rights
At any time you can ask to access, correct or delete your data, to restrict its processing, to object to processing based on legitimate interest and to receive your data in a portable format (Art. 15-22 GDPR). To exercise these rights, write to benedetti@sappada.info.
If you believe the processing is not lawful, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your own country.
Changes to this notice
We may update this notice, for example if the services used by the website change. The date of the last update is shown at the top.