Privacy Policy

Data controller

Lorenzo Ricciarelli — Via Daniele Ricciarelli 13, 20148 Milan, Italy. Email: lorenzo@casaricciarelli.com.

Data collected and purposes

• Booking / contact form: name, email, dates, message. Purpose: replying to the inquiry and managing the stay. Legal basis: pre-contractual measures (art. 6.1.b GDPR).
• Check-in data: for guests, ID document forwarded to the Italian State Police's "Alloggiati Web" portal as required by Italian law. Legal basis: legal obligation (art. 6.1.c GDPR).
• Tourist tax: guest details transmitted to the Municipality of Milan. Legal basis: legal obligation.
• Third-party forms (Web3Forms): the contact form sends data through Web3Forms (EU/USA). Data is used only for delivery and is not shared for marketing.
• Voluntary reviews: explicit consent is collected via a dedicated checkbox before publication.

Retention

Booking and check-in data are retained for the period required by law (typically 10 years for tax records, in line with Italian State Police guidance for Alloggiati Web). Contact messages are kept for up to 24 months unless deletion is requested.

Your rights

You have the right to access, rectify, erase, restrict, object and port your data (arts. 15-22 GDPR). To exercise them, write to lorenzo@casaricciarelli.com. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Building cameras

The building has video surveillance at the common entrance areas, managed by the condominium in compliance with GDPR. The apartment itself has no cameras.