Data Controller
The Data Controller of personal data is D&D s.a.s. di Davide e Alessandro Durante (brand Dear Guest), with registered office at Via Giacomo Matteotti 140, 17022 Borgio Verezzi (SV), Italy. Phone: +39 350 073 1377. For any privacy-related requests, the Data Controller can be contacted at the contact details indicated on the official Dear Guest website.
Categories of personal data processed
Dear Guest processes the personal data provided by Guests and website users, including, by way of example: name, surname, email address, telephone number, identity document data (and related personal identification details), residential address, stay details (dates, number of guests, special requests), any tourist tax, and data necessary for payment management.
Payment data are processed through external providers (e.g. Stripe and PayPal) in accordance with their respective terms and privacy notices.
Purposes of processing
Personal data are processed exclusively for purposes related to the stay and the management of the reservation, and in particular for:
managing the reservation and pre- and post-stay communications;
operational management of the stay and assistance to the Guest;
performance of the tourist lease agreement between the Guest and the Property Owner;
compliance with legal obligations (registration with Alloggiati Web and ISTAT);
management of payments and tourist tax;
handling of any requests, complaints, disputes, or claims.
In the absence of specific consent, data are not used for marketing or newsletter purposes.
Legal basis for processing
Processing is based on:
performance of pre-contractual measures and the contract (reservation and stay);
compliance with legal obligations;
legitimate interest in managing and protecting the relationship (e.g. security, handling of complaints/disputes), within the limits permitted by law.
Role of Dear Guest and relationship with Property Owners
Dear Guest operates as a property manager and agent (mandatario) of the Property Owners, carrying out activities such as promotion, operational management, guest reception, payment collection, and assistance to Guests.
The tourist lease agreement is concluded between the Guest and the Property Owner; Dear Guest does not act as landlord but processes data for the organization and management of the stay.
Processing methods and tools used
Kross Booking (including the Guest Portal) is used for reservation management and online check-in.
For data storage and operational management, cloud services such as Google Drive, Dropbox, and OneDrive may be used.
Navigation data, cookies, and analytics (Squarespace)
The website is built on Squarespace. During navigation, technical data may be collected (e.g. IP address, device identifiers, browser information), and cookies or similar technologies may be used for website functionality, aggregated performance analysis, and content improvement.
Where required by law, non-technical cookies and analytics/marketing tools are activated only with prior consent via a cookie banner/settings. For further details, please refer to the website’s Cookie Policy.
Communication of data to third parties
Data may be communicated to:
competent public authorities (Questura, ISTAT, Municipality);
technical and payment providers (Kross Booking, Squarespace, cloud providers, Stripe, PayPal);
Property Owners, for purposes strictly related to the stay;
professionals, consultants, and appointed parties, within the limits necessary.
Transfers outside the EU
The use of certain providers may involve transfers outside the EU. Such transfers take place in compliance with the GDPR through appropriate safeguards (e.g. Standard Contractual Clauses or other instruments provided by law).
Data retention period
Data relating to reservations, stays, contracts, and related obligations are retained for as long as necessary for the purposes indicated and, in any case, for up to a maximum of 10 years from the end of the stay, in accordance with fiscal/accounting obligations and ordinary limitation periods for the protection of rights.
Data collected for Alloggiati Web and ISTAT are retained for the periods required by applicable law.
At the end of the retention period, data will be deleted or anonymized.
Rights of the data subject
The data subject may exercise the rights provided by the GDPR (access, rectification, deletion within legal limits, restriction, objection where applicable, portability) and lodge a complaint with the competent Supervisory Authority.
Requests may be sent to the Data Controller at the contact details indicated in point 1 and on the official Dear Guest website.
Updates
This privacy notice may be updated. The version published on the website is to be considered the current one.