Privacy and cookie policy
Last updated: October 2026
This page explains how we process the personal data of people who visit dimoredellacisterna.it, contact us or stay in our apartments, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian law.
1. Data controller
SESA Srl, Via Romanico Roncaro 17, Baveno (VB), Italy, VAT and tax code 02506520036. Email: info@dimoredellacisterna.it.
2. What data we process
- Browsing data: IP address, browser type and pages visited, collected automatically by the systems that run the website.
- Data you give us: name, email, phone number and the content of your messages when you contact us by email, WhatsApp or phone.
- Booking data: personal details, contact details, dates of stay and payment details, collected through the Octorate booking system.
- Guest data required by law: identity document details, which we are required to report to the police (art. 109 of the Italian TULPS) and which are also used for the tourist tax and tourism statistics.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiries | Pre-contractual steps at your request (art. 6.1.b GDPR) |
| Managing your booking and stay | Performance of a contract (art. 6.1.b GDPR) |
| Reporting to the police, tourist tax, tax and accounting obligations | Legal obligation (art. 6.1.c GDPR) |
| Website visit statistics | Your consent via the cookie banner (art. 6.1.a GDPR) |
| Security and proper functioning of the website | Our legitimate interest (art. 6.1.f GDPR) |
4. Who may receive it
Your data is processed by us and, where necessary, by suppliers acting on our behalf: the booking system provider (Octorate), our website hosting provider, Google for visit statistics (only with your consent) and our tax adviser. If you message us on WhatsApp, the message also passes through WhatsApp’s services. Data required by law is passed to the competent authorities. We never sell or share your data with third parties for marketing purposes.
5. Transfers outside the European Union
Some suppliers, such as Google and WhatsApp, may process data in the United States. In these cases the transfer is based on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
6. How long we keep it
Enquiries that do not lead to a booking: up to 24 months. Booking data and tax documents: 10 years, as required by law. Data reported to the police is not kept by us longer than needed to send it.
7. Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its processing or to receive it in a portable format, and you can withdraw any consent you have given, by writing to info@dimoredellacisterna.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Cookies
Cookies are small files that the website stores in your browser. We use:
- Technical cookies, needed for the website to work: for example to remember your language and your cookie preferences. They do not require consent.
- Google statistics cookies, which tell us in aggregate form how many people visit the website and which pages they view. They are only set if you accept them in the banner.
You can change your choices at any time from the cookie banner or in your browser settings. The Octorate booking system and WhatsApp use their own cookies when you open them, governed by their own policies.
9. Changes
We may update this policy; the date of the last update is shown at the top.
