Privacy & Cookie Policy
Last updated: 30 June 2026
This policy explains how your personal data is handled when you contact Cavallina Retreat or use this website, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Italian Legislative Decree 196/2003 as amended.
Data controller
Controller: Società Agricola Piccolo Colle S.r.l.
VAT (P.IVA): 00739940237
Address: Via Broiare 35, 37010 Affi (VR), Italy
Email: [email protected]
Phone: +39 338 912 2553
What data we collect
Booking and enquiry data you send us by WhatsApp, email or phone: your name, contact details, dates of stay, number of guests and anything else you choose to share so we can answer and manage your stay.
Availability and booking data you enter into our Lodgify search/booking tool.
Technical data automatically recorded by our hosting provider (e.g. IP address, browser type, pages visited) in server logs, for security and to keep the site running.
Measurement data from advertising and map cookies — only if you accept cookies (see the cookie section below).
Why we use it and the legal basis
To answer your enquiry and arrange your stay — processing necessary to respond to your request and perform the booking (Art. 6(1)(b) GDPR).
To keep the website secure and working — our legitimate interest (Art. 6(1)(f) GDPR).
To measure our advertising and load the map — only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
To meet legal and tax obligations connected with a booking (Art. 6(1)(c) GDPR).
Who we share it with
We do not sell your data. It is shared only with service providers ("processors") that help us run the business: Lodgify (booking software), Cloudflare (website hosting and security), Google (Google Maps and Google Ads, only after consent) and Meta/WhatsApp (when you message us on WhatsApp).
Some of these providers are based outside the EU/EEA (e.g. in the United States). Where that happens, transfers are protected by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.
Cookies
On first visit the site loads with no profiling cookies. A small banner asks for your choice, and we store that choice on your device (in local storage) so we don’t ask again — this is technically necessary and needs no consent.
Only if you click “Accept” do we load: Google Maps (to show our location) and Google Ads (gtag.js) to measure visits that come from our adverts. If you click “Decline”, these are never loaded.
You can change your mind at any time by clearing this site’s data in your browser, which makes the banner appear again.
How long we keep it
Enquiry messages are kept only as long as needed to deal with your request and any follow-up, and then deleted. Data tied to an actual booking is kept for the period required by Italian tax and accounting law. Server logs are kept for a short period for security.
Your rights
You have the right to access your data and to ask us to correct, update or delete it, to restrict or object to processing, to receive a copy in a portable format, and to withdraw consent at any time.
To exercise any of these, just email us. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).