Privacy policy
In short: we process only the data you give us in order to reply to you and, if you book, the data the law requires us to hold on people staying here. We do not sell it and we do not use it for anything else.
Who processes your data
The data controller is Andrea Ranzanici, who runs the tourist let Residenza Ca' laRipa, Via dei Fantoni, 16 — 24060 Solto Collina (BG). For any request about your data: [email protected].
What data, why and on what legal basis
Enquiries. If you write to us through the form, by email, by phone or on WhatsApp, we process what you give us (name, contact details, dates, number of people, requests such as a cot) in order to reply to you and prepare any booking. The legal basis is pre-contractual measures taken at your request (Art. 6(1)(b) of Regulation (EU) 2016/679, GDPR).
Stays. If the stay is confirmed, we process the data needed for the contract and for our legal obligations: reporting guests to the police headquarters (Questura) through the Alloggiati Web portal, the municipal tourist tax and tax compliance (Art. 6(1)(b) and 6(1)(c) GDPR).
Providing your data is optional, but without it we cannot reply to you; the data the law requires for people staying here, on the other hand, is mandatory. We do not take automated decisions and we do not carry out profiling.
For how long
Enquiries that do not turn into a booking are kept for as long as it takes to reply to you and for twelve months at most, and are then deleted. Data relating to stays is kept for the period required by tax and administrative obligations.
Who else sees it
We do not pass your data on to anyone. It is processed only by the providers of the services we use, each for its own part:
- Infomaniak (Switzerland): our mailbox.
- Web3Forms: forwards the form to our email. The service is operated from India on Amazon Web Services servers and keeps a copy of requests for up to three years.
- Cloudflare (United States): hosts the website and delivers the pages.
- Google: the calendar on which we record bookings.
- WhatsApp (Meta), only if you choose to write to us there.
- Microsoft (United States): the Outlook app we use to read our email synchronises messages through its servers.
Some of these providers process data outside the European Economic Area. Switzerland is covered by an adequacy decision of the European Commission; for the United States, the EU-US Data Privacy Framework applies, to which Cloudflare, Google, Meta and Microsoft adhere, and failing that the standard contractual clauses; for Web3Forms, the standard contractual clauses. Where the law requires it, data is passed to the competent authorities.
Browsing, language and map
This website does not use cookies or any visitor statistics: no profiling, no embedded videos, no social media buttons; fonts and images are hosted on our own domain. Like any website hosting service, Cloudflare processes visitors' IP addresses in order to deliver the pages and protect them from attacks. When you open the home page, only the country is derived from your IP address, so that we can offer you the site in your language: this information is not stored and you can always change the language from the menu.
The map on the Contact page is provided by Google and, once opened, may set its own cookies: that is why it does not load automatically, but only if you press the button. Links to external websites, such as visitlakeiseo.info, open in another tab and are subject to the rules of those websites.
Your rights
You can ask at any time to access your data, to have it corrected or erased, to restrict its processing, to object to it, or to receive it in a readable format, by writing to the address above: we reply within one month. If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
This is a translation: in case of doubt the Italian version prevails.
Last updated: September 2026.