Last update: 05 december 2025

This privacy notice describes how personal data of users visiting and using the website www.seipetali.it are processed, in accordance with EU Regulation 2016/679 (GDPR).

Data Controller
Seipetali
Via del Vocabolo Ducale 96
06033 — Cannara (PG), Italy
Email: seipetali.umbria@gmail.com

Last updated: December 5, 2025

1. Types of Data Collected

1.1 Data Provided Voluntarily

When submitting requests through website forms, users may provide:

• first and last name;

• email address;

• phone number (if provided);

• any information included in the message.

These data are used exclusively to respond to the submitted request.

1.2 Browsing Data

During normal website usage, the following data may be automatically collected:

• IP address (anonymized or aggregated when possible);

• browser and device type;

• pages visited and time spent;

• date and time of visit;

• other technical data necessary for website operation.

These data are collected in aggregated or anonymized form for statistical, security, and maintenance purposes.

1.3 Cookies

The website uses technical cookies and third-party cookies (e.g., Google Maps). For details and management, see the dedicated Cookie Policy on the website.

2. Purposes and Legal Basis of Processing

Collected data are processed for the following purposes:

1. Responding to requests submitted via forms — legal basis: explicit consent / pre-contractual measures.

2. Providing information about apartments, availability, and services — legal basis: pre-contractual measures or consent.

3. Improving website functionality and security — legal basis: legitimate interest of the data controller.

4. Complying with legal obligations or authorities’ requests — legal basis: legal obligation.

No newsletters are sent, and no profiling is performed for marketing purposes unless explicitly consented.

3. Third-Party Tools and Plugins Used

The website uses the following plugins and services:

• Booking Calendar (wpdevelop, oplugins): displays availability and manages bookings; collects data entered in booking forms (name, contacts, booking details).

• Contact Form 7 (Takayuki Miyoshi): collects only data entered in contact forms.

• CookieYes | GDPR Cookie Consent (CookieYes): manages cookie banner and consent; stores user cookie preferences.

• Elementor / Royal Elementor Addons: page and form builders; only process data entered in forms.

• Polylang / Connect Polylang for Elementor: multilingual content; does not collect personal data beyond user-submitted content.

• Yoast SEO: SEO optimization; does not collect personal data of visitors.

• Rank Math SEO: (if active) SEO optimization; does not collect visitor personal data.

• W3 Total Cache: improves performance; may temporarily process technical navigation data.

• Wordfence Security: firewall and malware scanning; collects technical access data (e.g., IP) to prevent attacks.

• Duplicate Page: administrative tool; does not collect visitor personal data.

Note on transfers outside the EU: services such as Google Maps may involve data transfer to third countries. Transfers are based on contractual safeguards (e.g., Standard Contractual Clauses) or other GDPR-compliant mechanisms.

4. Data Processing and Security

Data are processed electronically and/or on paper with adequate technical and organizational measures to ensure integrity, confidentiality, and availability (encryption, access control, backups, software updates). Access is limited to authorized personnel and service providers.

5. Data Retention

Data are retained only as long as necessary:

• form requests: maximum 12 months (unless legal obligations require longer);

• technical browsing data: according to service provider policies (server logs, Wordfence, analytics plugins);

• legal obligations: for the period required by law.

6. Data Sharing

Data may be shared with:

• technical providers and personnel for website maintenance and related services (hosting, support, plugin developers);

• public authorities if required by law.

Data are not sold or shared for commercial purposes.

7. User Rights

Under Articles 15–22 of the GDPR, users can:

• access their data;

• correct or update data;

• request deletion, where applicable;

• restrict processing;

• object to processing;

• request data portability, where applicable;

• withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise rights, contact: seipetali.umbria@gmail.com

8. Minors

Services are not intended for persons under 16 years of age. Any personal data submitted by minors will be deleted as soon as the controller becomes aware.

9. External Links

The site may contain links to external services (e.g., Google Maps). This privacy policy does not apply to external websites. Users should review the privacy policies of those sites.

10. Changes to This Privacy Policy

The data controller reserves the right to update this policy. Changes will be published on this page with the updated date.

11. Contact

For questions, complaints, or requests regarding personal data: seipetali.umbria@gmail.com