How we handle the personal data of people who visit this site and of people who contact us, under Articles 13 and 14 of Regulation (EU) 2016/679.
This is a courtesy translation. In case of discrepancy, the Italian version prevails.
The data controller is Do.Ma di Mandalà Federico, with registered office at Via Liguria 16, 40139 Bologna, P.IVA 04105101200 (Italian VAT registration number).
For any question about this privacy policy, or to exercise your rights, you can write to direzione.do.ma@gmail.com or call +39 329 763 4840.
We have not appointed a Data Protection Officer (DPO) because none of the cases provided for by Article 37 of Regulation (EU) 2016/679 (GDPR) apply.
This site is deliberately minimal: it installs no profiling cookies and uses no advertising tools. The only external tool is Google Analytics 4, which starts only if you accept it in the banner. The only form on the site is the stay request form described below. The data we process is as follows.
Our hosting provider's systems automatically record certain technical data, as any web server does: IP address, date and time of the request, page requested, browser type and operating system. This data serves solely to make the site work, to keep it secure and to diagnose any malfunctions. We do not use it to identify visitors and we do not cross-reference it with other information.
When you write to us by email, call us, contact us on WhatsApp or message us on Instagram, we process the data you send us of your own accord: your name, contact details and the information about your property that you choose to share. We use it only to reply to you and, if the relationship continues, to prepare the valuation or the proposal you asked us for.
On the Portfolio page you can send us a stay request by filling in a form. The fields are: full name and email (required, so that we can reply), phone, arrival and departure dates, number of guests, property or area of interest and the text of your request (optional). Before sending, we ask you to confirm that you have read this privacy notice: this is not consent, because the data is needed to answer a request you make.
The data is handled by a script hosted on our own domain and forwarded only to our mailbox: it is not saved in any archive or database on the site and does not pass through external form services. The form contains a hidden anti-spam field that collects no data about you. If you prefer not to use it, you can reach us just as well by email, phone or WhatsApp.
The "Subscribe" link and the links to our articles lead to our page on Substack. You subscribe on Substack's site, not on this one: you leave your email address there, and we then receive it too in order to send you the articles. The legal basis is your consent, which you can withdraw at any time through the unsubscribe link in every email. Substack Inc. processes the data as an independent controller under its own privacy policy.
The PDF downloads directly, without asking for your email or any other data.
Some buttons take you off this site: WhatsApp, Instagram, LinkedIn, Google Maps, Airbnb, the Trattoria da Me website, our direct booking system at doma.kross.travel (Krossbooking) and the page for booking a call at cal.com (Cal.com). Until you click them, none of these services receives any data from this site. Once opened, their own privacy policies apply. If you book through our booking system, Krossbooking processes the booking data on our behalf as a data processor.
If you press "Accept" in the banner, we use Google Analytics 4 to learn which pages are read, which channels visitors come from (search, social media, direct links) and which buttons are used (contact, booking, calculator). Google receives technical browsing data linked to a random code stored in the _ga cookie: it does not receive your name, email or what you type into forms, it does not log the IP addresses of visitors from the European Union and, by our choice, it does not use this data for advertising or profiling (Google Signals and advertising features switched off). If you reject, no Google script is loaded. Details in the Cookie policy.
The calculator on this site runs entirely in your browser. The choices you make (area, property type, condition of the property) are sent neither to us nor to third parties and are not saved anywhere. If at the end you decide to use the WhatsApp or email button, it is you who sends us the message, and only at that moment does the data reach us.
| Purpose | Legal basis | Retention |
|---|---|---|
| Running and securing the site | Legitimate interest of the controller (Art. 6.1.f GDPR) | Technical logs kept by the hosting provider for as long as is necessary for diagnostics and security |
| Handling stay requests sent through the form | Pre-contractual measures at your request (Art. 6.1.b GDPR) | Up to 24 months from the last contact, if the request does not turn into a booking |
| Replying to your requests for information | Pre-contractual measures at your request (Art. 6.1.b GDPR) | Up to 24 months from the last contact, if the enquiry does not turn into a contractual relationship |
| Managing the contractual relationship, if you become a client | Performance of the contract (Art. 6.1.b GDPR) | For the whole duration of the relationship and, for tax and accounting documents, for the periods required by law (ordinarily 10 years) |
| Aggregate visit statistics for the site (Google Analytics 4) | Consent (Art. 6.1.a GDPR and Art. 122 Italian Privacy Code), which can be withdrawn at any time via "Cookie preferences" | Cookies: 13 months. Statistics in Google Analytics: 14 months, then deleted automatically |
| Sending the newsletter to those who subscribe on Substack | Consent (Art. 6.1.a GDPR), which can be withdrawn at any time | Until you unsubscribe |
| Legal obligations relating to short lets and hospitality | Legal obligation (Art. 6.1.c GDPR) | For the periods laid down by each applicable law |
We do not sell or pass on data to anyone for commercial purposes. The following may access it, within the limits of what is necessary:
The site's fonts and images are hosted on our own servers: without your consent to statistics, visiting the pages involves no request to third-party servers and therefore no disclosure of your IP address to outside parties.
The site is hosted in Italy. Some of the providers listed above (Google, Meta for WhatsApp, Substack, Cal.com) are based in, or belong to groups based in, the United States and may process data outside the European Economic Area: in those cases the transfer takes place on the basis of the safeguards provided for by Chapter V of the GDPR, in particular the adequacy decision on the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
At any time you can exercise the rights provided for by Articles 15 to 22 of the GDPR:
To exercise them, simply write to direzione.do.ma@gmail.com. We reply within one month of the request.
If you believe that the processing of your data breaches the rules, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (Piazza Venezia 11, 00187 Rome, garanteprivacy.it), or to bring the matter before the courts.
This site installs no profiling cookies. The only third-party cookie is the Google Analytics 4 statistics cookie, installed only with your consent. All the details are in the Cookie policy; you can change your choice at any time via Cookie preferences.
You are not obliged to give us any data. If, however, you choose not to give us your contact details and the information about the property, we will simply not be able to reply to you or to prepare a valuation.
We carry out no profiling and no entirely automated decision-making within the meaning of Article 22 of the GDPR. The estimates produced by the calculator are a simple indicative calculation run in your browser and produce no legal effect concerning you.
We may update this privacy policy to bring it into line with changes in the law or with new tools activated on the site. The version published on this page, with the update date shown at the top, is always the one in force.