Legal
Privacy Policy
Last updated: September 10, 2026
This page organizes, in a structured way, how data is handled on this site. It is not legal advice — we are not lawyers. For a formal check of GDPR compliance (in particular data retention periods and related obligations such as the "Alloggiati Web" report to Italian public security authorities, which is a separate obligation from this site) we recommend consulting a professional.
1. Data controller
The data controller is Uto, the host of SeaSide Apartment, operating as a private individual (no VAT number / company), reachable at utocava@gmail.com.
2. What data we collect
When you send an availability or booking request through the site, we collect:
- First and last name
- Email address
- Phone number (if provided)
- Stay dates and number of guests
- Any message you write in the form
If you complete an online payment, your card details are handled entirely by Stripe: this site never sees or stores them (see point 4).
The site, at present, does not use profiling cookies or analytics tools that track visitors. If a statistics tool is added in the future, this page will be updated accordingly.
3. Why we process it
Data collected through the request/booking form is processed to follow up on your request and, where applicable, to perform the accommodation contract (legal basis: GDPR art. 6.1.b — performance of a contract or pre-contractual steps). We do not use your data for marketing purposes without separate, explicit consent.
4. Who we share data with
Data only passes through the technical providers needed to run the site:
- Supabase — the database where booking requests are stored.
- Stripe — if you choose to pay online, processes the payment; we never send it your card details, which it handles directly.
- Resend — sends automated emails (request received, booking confirmed).
These providers may process data outside the European Union (for example, in the United States) under their respective standard contractual safeguards for international data transfers. We do not sell or share your data with third parties for advertising purposes.
5. How long we keep data
We keep data from a request that did not go through (declined or never confirmed) for a limited time, after which it is deleted. For confirmed bookings, data is kept longer for possible tax obligations and reporting to public security authorities (Alloggiati Web) — the exact retention periods, being tied to local tax regulations, should be confirmed with an accountant before this page is considered final.
6. Your rights
You can ask us at any time to access, correct, delete or restrict the processing of your data by writing to utocava@gmail.com. If you believe the processing does not comply with the law, you have the right to lodge a complaint with your national data protection authority.
7. Technical cookies
The site may use strictly technical cookies (for example, to keep the host's private backoffice session active). No profiling cookies are used for visitors of the public site.