Privacy notice

The data controller for the Ondaora website and availability enquiries is Jacopo Mazzoni. For privacy questions or to exercise your rights, email ondaora2003@gmail.com or call +39 329 316 2434.

When you visit the website, the hosting provider and external-content providers may process technical connection data such as IP address, date and time of requests, and browser information. For an availability enquiry you may provide the property, check-in and check-out dates, numbers of adults and children, and optional notes. The form does not request identity documents or payment information. If you choose to send the message on WhatsApp, we will also process the contact details and information you decide to share in that conversation. Please avoid including health information or other particularly sensitive details in the notes.

We use information you voluntarily send to answer availability questions, provide details about the accommodation and, where relevant, take steps at your request before a potential booking (GDPR Article 6(1)(b)). The site’s technical operation and security rely, where applicable, on our legitimate interests (Article 6(1)(f)). If a booking is made, legal obligations may require further processing (Article 6(1)(c)). We do not use enquiry details for newsletters or personalised advertising.

The form details are processed in your browser to prepare a message. Simply completing the form does not send an enquiry to Ondaora, and the website does not save form fields in its own database. When you select “Continue on WhatsApp”, a WhatsApp conversation opens with the prepared text: you decide whether to send it. If you open WhatsApp, the provider may process information under its own privacy policy.

• Hosting and security: The website is hosted on Cloudflare Pages. Cloudflare may process technical access information to deliver and secure the website. Cloudflare privacy policy
• Maps: Property pages automatically load OpenFreeMap map tiles and the MapLibre library from the unpkg content delivery network. These providers may receive technical connection data. OpenFreeMap privacy policy
• Fonts: The homepage uses Google Fonts; this may generate technical requests to Google servers. Google privacy policy
• WhatsApp: WhatsApp opens with the prepared message only when you choose “Continue on WhatsApp”. The website does not send the enquiry automatically. WhatsApp privacy policy
• External links: Google Maps opens only if you select its link.

Data may be shared, only where necessary, with people assisting in handling enquiries and stays. Some providers also operate outside the European Economic Area; consult their policies for information on international data transfers.

WhatsApp conversations about enquiries that do not result in a booking are kept for as long as necessary to handle the enquiry and, as an operational guideline, normally no longer than 12 months after the last exchange, unless there is a documented need to keep them longer (for example, to resolve a dispute or protect legal rights). If a booking is made, some records may be kept for periods required by law. Technical logs and data processed by third-party providers are subject to their respective retention periods.

No identifying information is needed simply to browse the site. The enquiry form is optional; without dates and guest numbers, preparing a detailed enquiry may not be possible, but you can always call us directly. Additional notes are optional.

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction, objection or data portability. Email ondaora2003@gmail.com to exercise your rights. You may lodge a complaint with the Italian Data Protection Authority (Garante). We do not engage in profiling or solely automated decisions producing legal effects.

The website does not use its own visitor analytics, advertising cookies or profiling tools. Information entered in the enquiry form is not stored in browser cookies. Hosting, fonts and maps involve technical requests to external providers; whether those services use cookies or similar identifiers depends on the providers and their configuration. No cookie-consent banner is planned where no non-essential technologies requiring consent are used. If optional tracking technologies are introduced in the future, appropriate information and prior consent will be provided where required.