Casa Torallo

Policy Privacy

Privacy Policy

This Privacy Policy describes how Casa Torallo processes the personal data of users who visit this website and use the online services available, such as the contact form, availability requests and direct communication links.

Data Controller

The Data Controller is Nicola Ostuni, with registered office at Via Cortile Torallo, 75022 Irsina, Italy.

For any request regarding the processing of personal data, users may contact the Data Controller at:

E-mail: ostuninicola@hotmail.com
Phone: +39 339 619 9063

Types of data collected

The website may collect personal data voluntarily provided by the user, including:

first and last name;
e-mail address;
phone number;
any information included in messages sent through the contact form;
stay-related information, such as arrival and departure dates, number of guests and specific requests.

The website may also collect technical browsing data, such as IP address, browser type, device information and data collected through cookies or similar technologies, as described in the Cookie Policy.

Purposes of processing

Personal data is processed for the following purposes:

to reply to requests sent through the contact form;
to manage availability requests, information requests and bookings;
to provide communications related to the stay;
to comply with legal, tax or administrative obligations;
to ensure the proper technical functioning of the website;
to analyse website usage in aggregated or anonymised form, where analytics tools are active.

Legal basis for processing

The processing of personal data is based on one or more of the following legal bases:

performance of pre-contractual or contractual measures requested by the user;
compliance with legal obligations;
legitimate interest of the Data Controller in managing communications and ensuring the proper functioning of the website;
user consent, where required, for example for non-technical cookies or tracking tools.

Processing methods

Personal data is processed using electronic, telematic and, where necessary, paper-based tools, with appropriate technical and organisational measures to protect data against unauthorised access, loss, misuse or disclosure.

Data retention

Personal data will be retained for the time necessary to reply to user requests, manage any pre-contractual or contractual relationship and comply with legal obligations.

Data sent through the contact form will be retained for the time necessary to manage the request and, in any case, no longer than required for administrative, tax or legal protection purposes.

Disclosure of data to third parties

Personal data may be disclosed to parties that support the Data Controller in managing the website and related services, such as hosting providers, e-mail service providers, technical consultants, tax consultants or other authorised parties.

Personal data will not be publicly disclosed and will not be sold to third parties.

Third-party services

The website may include third-party services, such as interactive maps, WhatsApp contact buttons, analytics tools, technical plugins or services related to website management.

These services may collect data according to their own privacy policies. Users are encouraged to read the privacy policies of the relevant providers for further information.

Transfer of data outside the European Union

Some third-party services may involve the transfer of data to countries outside the European Union. In such cases, the transfer will take place in accordance with the safeguards required by applicable law.

User rights

Users may exercise, where applicable, the following rights:

right of access to personal data;
right to rectification of inaccurate data;
right to erasure of data;
right to restriction of processing;
right to object to processing;
right to data portability, where applicable;
right to withdraw consent, where processing is based on consent.

To exercise these rights, users may contact the Data Controller at the e-mail address provided in this policy.

Complaint to the supervisory authority

Users have the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their personal data violates applicable data protection law.

Changes to this policy

The Data Controller reserves the right to modify this Privacy Policy at any time. Any changes will be published on this page.

Last updated: May 19, 2026