Legal notice and privacy

Data controller

Bruna Bernardetta Mutschlechner, Apartments Ciasa Gabriel, Str. Sotdlijia, 61, 39033 Corvara loc. Colfosco (BZ). For any question about your data, write to info@ciasagabriel.it or call +39 335 6916271.

What data we process and why

Enquiries and offers: your name, contact details, dates, number of guests and whatever you write to us by email, phone or the request form, so we can reply and prepare an offer. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR).

Bookings and stays: the data needed to run your stay and to meet legal duties, such as registering guests with the police (Questura), the tourist tax and accounting. Legal basis: contract and legal obligations (Art. 6(1)(b) and (c) GDPR).

Visiting the site: the hosting provider processes technical data such as IP address, browser type, page requested and time, needed to serve the pages and protect the site from abuse. Legal basis: legitimate interest in the security and operation of the site (Art. 6(1)(f) GDPR).

The request form

The form does not store or send any data through the site: it opens your email app with the message filled in, and the data reaches us only when you send the email yourself.

Whether you must provide data

Providing data is optional, but without contact details we cannot reply to you or confirm a booking.

Who receives the data

We do not sell your data, publish it or use it for advertising. Only the providers of the services we need process it on our behalf: email (Aruba S.p.A., Italy) and website hosting (Cloudflare, Inc.). If you book through the Holidu form, Holidu GmbH also processes the booking data under its own privacy policy. We pass data to authorities and advisers only when the law requires it.

Transfers outside the European Union

Cloudflare and, only if you load the map or the booking form, Google and Microsoft may process data in the United States. Transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

How long we keep data

Enquiries without a booking for as long as needed to reply and handle any follow-up. Booking data and tax records for as long as the law requires (10 years for accounting records). Technical access data only as long as needed for the security of the site.

Your rights

You can ask at any time for access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest, by writing to info@ciasagabriel.it. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live.

We make no automated decisions and do no profiling.

Privacy policies of the external services

• Holidu GmbH
• Google (Maps)
• Microsoft (Clarity)
• Cloudflare
• Garante per la protezione dei dati personali