Privacy Policy
Updated: October 2026
1. Data controller The data controller responsible for personal data relating to this website and the letting of the Capazza Vista holiday apartment is:
Fam. Caringi Bastian
Eichhagen 15
38108 BS
Germany
Email: capazzavista@gmail.com
Phone: +491701602501
CIN: IT090082C2000U7175
CIR: 090082C2000U7175
2. General information We take the protection of your personal data seriously. Personal data is treated confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR). Personal data means any information that can identify a person directly or indirectly, such as a name, address, email address, phone number or booking details.
3. Visiting our website When you visit our website, technically necessary data required to provide and secure the website may be processed. This may include, in particular, your IP address, the date and time of access, browser type, operating system and pages visited. Where necessary, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to ensure the secure and reliable operation of our website.
4. Use of Smoobu We use Smoobu to manage our holiday apartment, display availability and process bookings and booking enquiries. The provider is:
Smoobu GmbH
Pappelallee 78/79
10437 Berlin
Germany
In connection with a booking or booking enquiry, the following data may be processed in particular: First and last name Address Email address Phone number Travel and booking details Number and details of accompanying guests Payment and billing information Messages and other information provided in connection with the booking Processing takes place in particular to take pre-contractual steps and perform the accommodation or rental contract under Art. 6(1)(b) GDPR and, where necessary, to comply with legal obligations under Art. 6(1)(c) GDPR.
5. Contact If you contact us by email, contact form or other means, we process the information you provide to handle your enquiry. If your enquiry relates to a booking or possible stay, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing may be based on our legitimate interest in handling and responding to enquiries under Art. 6(1)(f) GDPR.
6. Direct bookings If you book directly through our website, we process the personal data required to make the booking. This includes, in particular, contact details, the period of stay, number of guests, agreed services and information required to process payment. The data is processed to handle the booking and the resulting contractual relationship under Art. 6(1)(b) GDPR.
7. Payment processing Several payment methods may be offered for a booking. Stripe We use the payment service provider Stripe for online payments. The provider for the European region is, in particular:
Stripe Payments Europe Limited
1 Grand Canal Street
Lower Grand Canal Dock
Dublin
Ireland
If you select a payment method processed through Stripe, the data required to process the payment will be transmitted to Stripe or processed directly by Stripe. This data may include, in particular, your name, contact details, payment amount, booking information and payment details. The data is processed to handle your chosen payment method and perform the contract under Art. 6(1)(b) GDPR. Stripe may also process data to comply with its own legal obligations as a payment service provider.
PayPal If you select PayPal as your payment method, the data required to process the payment will be transmitted to the payment service provider PayPal. The provider is:
PayPal (Europe) S.à r.l.et Cie, S.C.A.
22–24 Boulevard Royal
L-2449
Luxembourg
Data is processed in particular to process the payment method you selected and therefore to perform the contract under Art. 6(1)(b) GDPR. PayPal also processes certain data under its own responsibility, for example to comply with legal obligations or prevent fraud. Bank transfer If you pay by bank transfer, the data required to process the payment is processed by the banks or payment service providers involved. The data is processed to handle the payment and therefore perform the contract under Art. 6(1)(b) GDPR.
8. Guest registration requirements in Italy When renting out our holiday apartment in Italy, we are required to collect certain information about our guests and submit it to the competent authorities in accordance with Italian guest registration requirements. This may include, in particular, names, dates and places of birth, citizenship and information from a valid identity document. This data is processed and transmitted to comply with legal obligations under Art. 6(1)(c) GDPR.
9. Bookings through third-party booking platforms If you book Capazza Vista through external booking platforms, such as Booking.com or other booking portals, your personal data will initially be processed by the relevant provider in accordance with its privacy policy. Data required to complete the booking may subsequently be shared with us and our booking and management system, Smoobu. The relevant data protection policies also apply to the processing of data by the booking platform.
10. Cookies and technically necessary functions Our website may use cookies and similar technologies. Technically necessary cookies may be used to the extent that they are essential for the operation of the website or booking system. If cookies or services requiring consent are used, they will generally only be used after you have given your express consent via the cookie settings or cookie banner provided for this purpose. You can change or withdraw your consent at any time with effect for the future.
11. Google Maps Maps from Google Maps may be embedded on our website to show the location of our holiday apartment and places and attractions nearby. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When Google Maps loads, personal data, in particular your IP address and technical information about the device you are using, may be transmitted to Google. In this context, data may also be processed outside the European Union or the European Economic Area. If consent is required to use Google Maps, the service will only load after you have given your consent via the cookie or privacy settings. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
12. Google Analytics If Google Analytics is used on this website, the service is used to analyse website usage and improve our services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only used if you have given the required consent. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings with effect for the future.
13. YouTube Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When embedded YouTube content is accessed, personal data, in particular your IP address and technical usage data, may be transmitted to Google. Where consent is required, the relevant content will only be loaded after you have given your consent. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
14. Instagram and social media Our website may contain links to our Instagram page or other social networks. In the case of a simple link, data is only transmitted to the relevant provider when you click on the corresponding link. If social media content is embedded directly on our website in the future, personal data may be transmitted to the relevant provider as soon as that content is loaded. Where consent is required, this content will only be loaded after consent has been obtained. The data protection policies of the respective providers also apply to the processing of data on their platforms.
15. Recipients of personal data Personal data is only shared to the extent necessary to process bookings and payments, comply with legal obligations or ensure the technical operation of our website. Recipients may include, in particular: Smoobu as our booking and management system Stripe, depending on the payment method selected PayPal, if you use this payment method banks and payment service providers involved the competent Italian authorities, as required by statutory reporting obligations external booking portals, if you book through them
16. Transfers of data to third countries When using individual service providers, it cannot be entirely ruled out that personal data may be processed outside the European Union or the European Economic Area. If such a transfer takes place, it is governed by the requirements of the GDPR.
17. Data retention Personal data is generally retained only for as long as necessary to fulfil the purpose for which it was processed. Booking and payment data may also be retained in accordance with tax, commercial or other statutory retention requirements. Once the purpose of processing has ended and statutory retention periods have expired, the data in question will be deleted unless another legal basis justifies its continued retention.
18. Your rights As a data subject, you have the following rights, subject to the legal requirements: access to the personal data we process rectification of inaccurate data erasure of personal data restriction of processing data portability objection to certain processing activities withdrawal of consent with effect for the future You also have the right to lodge a complaint with a competent data protection supervisory authority.
19. Security We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or unauthorised alteration. Despite appropriate security measures, complete protection cannot be guaranteed when data is transmitted over the internet.
20. Updates to this privacy policy This privacy policy may be updated if there are changes to legal requirements, the services we use or the way we process data. The latest version published on this website shall apply.
