Privacy

Data controller

The data controller is Holiday World, the manager of Casa Brighella, based in Via San Luigi, Genoa (Sestri Ponente). For any request regarding your personal data, you can contact us through the channels listed on the Book page (WhatsApp or the contact form).

What data we collect

If you write to us through the contact form, we collect the data you voluntarily provide: name, email address, type of stay, expected check-in and check-out dates, number of guests and the content of your message. This data is stored in a database (Google Cloud Firestore, hosted in Milan) and forwarded to us by email, solely to respond to your request and manage any booking.

If you contact us directly on WhatsApp or by email, we process the data you share in that conversation, for the same purposes.

The site does not require account creation and does not collect payment data: bookings through Booking.com or Airbnb are handled directly by those platforms under their own privacy notices.

Embedded map

Google Maps is not loaded until you give specific consent to external content. If enabled, Google may receive technical data and use its own technologies under its privacy notice; you can withdraw your choice through Cookie preferences in the footer.

Legal basis and retention

We process enquiry data to take pre-contractual steps at your request (Article 6(1)(b) GDPR), and administrative or tax data to meet legal obligations (Article 6(1)(c)). Google Analytics and Google Maps rely on consent (Article 6(1)(a)). Enquiries that do not lead to a booking are kept for no more than 24 months after the last contact; booking records follow applicable administrative and tax retention periods.

Recipients, transfers and security

Necessary service providers may process data, particularly Google Cloud/Firestore for form submissions and Google Workspace/Gmail for email notifications. Booking.com, Airbnb, WhatsApp and Google receive data only when you choose their channel or grant the relevant consent.

Some providers may process data outside the European Economic Area using GDPR safeguards, including adequacy decisions or standard contractual clauses. We use access controls, validation and anti-abuse measures, although no online transmission can be guaranteed risk-free.

Your rights

You may request access, correction, deletion, restriction and portability, object to processing and withdraw consent without affecting earlier processing, where Articles 15-22 GDPR apply. Contact us through the Book page; you may also lodge a complaint with the Italian Data Protection Authority. Form data is optional but needed for a reply. We do not use automated decision-making or profiling.