Privacy Policy

Who We Are

Salento (“Salento”, “we”, “us”, “our”) is an independent villa curator and introduction service for stays in the Province of Lecce. We are the data controller for all personal information collected through this website and in connection with our service.

Data We Collect

We collect personal information that you provide to us directly, as well as certain information collected automatically when you use our website. This may include:

• ◆Identity data: name, title, and date of birth where relevant.
• ◆Contact data: email address, telephone number, and postal address.
• ◆Request data: travel dates, villa preferences, number of guests, and special requirements. We do not process payments and do not collect or store card or bank details, as you pay the villa owner directly.
• ◆Technical data: IP address, browser type and version, time zone, cookie identifiers, and pages visited.
• ◆Communications: records of correspondence and requests sent to us.

How We Use Your Data

We use your personal data to respond to your requests, introduce you to villa owners who suit what you’re looking for, send you communications you have asked for, and improve our website and service. We may also use your data to comply with legal obligations, prevent fraud, and enforce our terms of service. We will only send you marketing communications where you have given your consent or where we have a legitimate interest to do so, and you can opt out at any time.

Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies, and the small first-party cookie that records your consent choice, are always active because the site cannot function without them. Analytics cookies are set only after you click “Accept” on the cookie banner shown on your first visit; if you decline, or ignore the banner, Google Analytics is not loaded. Your choice is stored for one year. You can change it at any time using “Cookie settings” in the footer. Declining after accepting stops analytics and reloads the page. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Analytics

We use Google Analytics 4, a service provided by Google, to understand how visitors find and explore the villas so that we can improve the website. Google Analytics is loaded only with your consent; nothing is sent to Google before you click “Accept” on our cookie banner. When enabled, it processes technical and usage data such as your IP address, device and browser type, and the pages you view. The legal basis for this processing is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time. You can learn more in Google’s own privacy policy at policies.google.com/privacy.

Error Monitoring

When configured, we use Sentry to identify technical faults. Diagnostic reports can include the error, browser information and the affected page path. Our application removes user fields, URL query strings, request bodies and error-message text from reports, disables default personal-data collection, and does not record session replays. This monitoring helps us maintain a reliable service. Contact us if you have questions about this processing or wish to exercise your rights.

Third Parties

We share your data with carefully selected third parties only to the extent necessary to deliver our service. These include Resend for internal enquiry notifications to Casa Camilla, Google (for the analytics described above, only with your consent), Sentry (for technical error monitoring when enabled), and, where you ask us to introduce you, the villa owner or their management team. Any payment for your stay is arranged directly between you and the owner, so we do not share your data with a payment processor. We do not sell your personal data to any third party. All third-party processors are bound by contractual data protection obligations consistent with GDPR requirements.

International Transfers

Some of our service providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission and/or certification under the EU-US Data Privacy Framework, so that your data continues to receive a level of protection consistent with the GDPR.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Where data is no longer needed, it is securely deleted or anonymised.

Your Rights

Under applicable data protection law (including the GDPR), you have the right to access, correct, or erase your personal data; to restrict or object to its processing; and to receive a portable copy of data you have provided to us. You also have the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, please contact us at bookings@casacamillajourney.com. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The “last updated” date at the top of this page will always indicate when the most recent changes were made. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.