Legal information
Privacy Policy
How we handle the personal data of website visitors and of guests who contact us.
Last updated: 6 November 2026
Draft note — template text: complete the details in square brackets and have it reviewed by an adviser before final publication.
1. Data controller
The data controller is [Full name / company name], [full address], tax code/VAT no. [—], operator of Domustè, Via Abruzzi 21, 73100 Lecce (LE), Italy. Contact: info@domuste.com, phone +39 334 210 5015.
2. Data we collect
- Availability requests (contact form): full name, email, phone (optional), number of guests, arrival and departure dates, any message.
- Direct contact by email, phone or WhatsApp: the information you send us.
- Your stay: guest details required by Italian law at check-in (personal details and identity document).
- Technical browsing data: IP address and browser data recorded in server logs for security and operation of the site.
3. Purposes and legal bases
- Replying to requests and sending quotes — pre-contractual steps at your request (Art. 6(1)(b) GDPR).
- Managing your booking and stay — performance of the contract (Art. 6(1)(b)).
- Legal obligations: reporting guests to the police via the Alloggiati Web portal (Art. 109 of the Italian Public Security Act), ISTAT statistics, Lecce tourist tax, tax and accounting duties — legal obligation (Art. 6(1)(c)).
- Security and proper operation of the website — legitimate interest (Art. 6(1)(f)).
4. Retention
- Requests that do not lead to a booking: up to 12 months.
- Booking data and accounting records: for the period required by tax law (usually 10 years).
- Data reported by law (Alloggiati Web, ISTAT): according to the relevant rules.
- Technical server logs: for a limited period, unless needed for security.
5. Recipients and providers
Your data is never sold or used for advertising. It may be processed on our behalf by:
- Hostinger International Ltd. (EU) — website hosting and email.
- Cloudflare, Inc. (USA) — delivery of the library animating the map on the home page (cdnjs); transfers under the EU-US Data Privacy Framework.
- OpenStreetMap Foundation (United Kingdom, adequacy decision) — map on the Contact page.
- WhatsApp / Meta Platforms Ireland Ltd. — only if you choose to message us on WhatsApp, under WhatsApp’s privacy policy.
- Public authorities (police, ISTAT, City of Lecce, tax authority) where required by law; tax advisers bound by confidentiality.
6. Your rights
You may at any time request access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to info@domuste.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority.
7. Cookies
This website uses technical cookies only. See the Cookie Policy for details.