Privacy notice

Last updated: 16 July 2026

Who handles your data

The data controller is Celeste Fontanari, who runs the holiday home Symphony Home at Via dei Caldonazzi 25, Serso — 38057 Pergine Valsugana (TN), Italy. For any question about this notice, or to exercise your rights, you can write to her or call her: info@symphonyhome.it · +39 371 368 7661

The availability request form

From the form we receive your name, email, the dates of the stay, the number of guests, any pets, a message and the language you write to us in. Name, email and dates are required: without them, we cannot reply; the rest is optional. We use them only to handle the request — pre-contractual steps, Art. 6(1)(b) of the Regulation — and, if no stay comes of it, we delete them within two years.

If you book and come to stay with us

• Booking. Your name, contact details, dates and number of guests serve to conclude and perform the contract (Art. 6(1)(b) of the Regulation).
• Reporting guests to the police. Within twenty-four hours of arrival we report, through the “Alloggiati Web” portal, the personal details of all guests, children included, and the document details of whoever checks in. This is a legal obligation (Art. 6(1)(c) of the Regulation; Art. 109 of the Italian Consolidated Public Security Act): that is why an identity document is required, and without it we cannot host you. Any copy of the document is deleted after transmission; we keep only the receipt issued by the portal, for five years.
• Provincial tourist tax. To collect it we process the number of guests, the nights and the dates of birth, because children under fourteen are exempt. To Trentino Riscossioni we report overnight stays and amounts, without names. Legal obligation (Art. 6(1)(c) of the Regulation).
• Tourism statistics. To ISPAT we report arrival and departure dates, the number of guests and where they come from, without names and covered by statistical secrecy. Legal obligation (Art. 6(1)(c) of the Regulation).
• Accounting. Accounting and tax records, together with the booking data they contain, are kept for the statutory periods: currently ten years (Art. 6(1)(c) of the Regulation).

These data go only to the Questura, the Autonomous Province of Trento, Trentino Riscossioni and ISPAT, each for the part that concerns them, and to our tax adviser.

If you book through Booking or Airbnb

In this case your name, contact details, dates and booking details are sent to us by the platform, which is their source. We process them for the same purposes and the same periods set out above; Booking.com and Airbnb also process them on their own behalf, under their own privacy policies.

If you write to us or call us

We use your data only to reply to you: pre-contractual steps or contract if a stay is being discussed (Art. 6(1)(b) of the Regulation), otherwise our legitimate interest (Art. 6(1)(f)). We keep conversations no longer than two years from the last message, unless the law requires otherwise. Messages on WhatsApp are also covered by Meta's own privacy policy.

Technical providers and recipients

• Cloudflare, Inc. Hosts the site, receives the form, delivers the emails addressed to our domain and protects it all from automated programs; for security it processes the IP address and technical details of the browser (Art. 6(1)(f) of the Regulation), which it does not pass on to us. Processor.
• Resend (Plus Five Five, Inc.). Delivers the emails generated by the form. Processor.
• Google. Your enquiries arrive, and stay, in the mailbox we reply to you from.

Where your data ends up

Cloudflare, Resend and Google are US companies: your data may therefore also be processed outside the European Union. All three are certified under the EU-U.S. Data Privacy Framework, by which the European Commission recognises that the United States provides adequate protection; the list of participants is at dataprivacyframework.gov. With Cloudflare and Resend the standard contractual clauses also apply. The camera's video stream may pass through TP-Link's servers, under the safeguards of the standard contractual clauses (Art. 46 of the Regulation); WhatsApp messages pass through Meta, under its own privacy policy.

Cookies and statistics

This site uses no cookies and no profiling tools: that is why there is no consent banner. Visit statistics (Cloudflare Web Analytics) are aggregated and anonymous. The form is protected by Cloudflare Turnstile, which tells people apart from automated programs: Cloudflare processes the IP address and a few technical details of the browser, and we receive only the outcome. Legal basis: our legitimate interest (Art. 6(1)(f) of the Regulation), which you may object to (Art. 21): simply write or phone us instead of using the form; your request gets the same reply.

CCTV

A single fixed outdoor camera covers the entrance courtyard and the garage ramp: not the interior, the public road or the neighbouring properties. It serves to protect people and property and to check that the people entering match the booking: this is our legitimate interest (Art. 6(1)(f) of the Regulation), and you may object at any time (Art. 21). It records images only, continuously, with no audio; they stay on the memory card inside the camera, with no cloud service, and are deleted within seventy-two hours, unless the authorities request them or an offence has to be reported. Only the owner sees them, including remotely through the manufacturer's app. The full notice is available on paper at the house and here as a PDF.

Your rights

You can ask us for access to your data, its rectification, its erasure or the restriction of processing, and you can object to the processing we base on our legitimate interest (Arts. 15–21 of the Regulation); for the data from the form and the booking you can also request portability (Art. 20). We cannot erase what the law requires us to keep or to report, such as the data transmitted to the Questura. If you believe that a processing operation breaches the law, you can lodge a complaint with the supervisory authority of the EU country where you live, or with the Italian Data Protection Authority (Art. 77 of the Regulation): garanteprivacy.it