Privacy notice

Data controller

The data controller is Deborah Colombo, whose business address is Viale degli Etruschi 206, 57034 Campo nell'Elba (Italy). For any question about your personal data, please write to info@elbadreaming.it

Data processed, purposes and legal basis

Browsing the site

As with any website, on every visit your browser automatically sends some technical data: IP address, browser and operating system type (user agent), the page or file requested, and the date and time of the request. These data are recorded in the logs of the hosting provider, Vercel, including when the apartment photos are loaded, which are delivered from the site's Vercel Blob store. They are processed only to deliver the site and keep it working and secure, for example to detect abuse or attacks. Legal basis: the controller's legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).

Visit statistics and performance

The site uses Vercel Web Analytics and Vercel Speed Insights to learn, in aggregate form, which pages are visited, where visits come from (referring site and country), on what type of device and browser, and how quickly pages load. These services do not use cookies, do not identify visitors and do not track them across other sites; their scripts are loaded from the site's own domain. Legal basis: the controller's legitimate interest in understanding how the site is used and improving its performance (Art. 6(1)(f) GDPR).

Enquiries and bookings

The form on the Contact page does not send any data to the site or to any server: it composes an e-mail and opens your own mail app, and you decide whether to send it. When you write to Elba Dreaming, through the form or directly to info@elbadreaming.it, we process the data contained in your message: your e-mail address, first and last name, and any other information you choose to include (for example phone number, apartment of interest, dates of stay, message text). If you provide a phone number, it may be used to call you back.

Purpose: answering your enquiry and, if you wish, handling your booking. Legal basis: steps taken at your request prior to entering into a contract and, if you book, performance of the contract (Art. 6(1)(b) GDPR). Providing these data is optional, but without them we cannot reply to your enquiry.

How long data are kept

The site does not store any visitor data: it is static, has no accounts, no database and no forms that send data to a server. Technical browsing data exist only in the logs of the hosting provider, Vercel, which keeps them for the limited period set by its own policies, after which they are deleted automatically. Visit statistics are viewed only in aggregate form and do not make it possible to identify visitors. A message that you choose to send by e-mail reaches the controller's mailbox and is kept for two years, after which it is deleted, unless the law requires it to be kept longer.

Recipients and providers

Data are not sold or passed on to third parties. They are processed on the controller's behalf, as data processors, only by the providers needed to run the service: Vercel Inc., for hosting the site, storing and delivering the photos (Vercel Blob), and visit and performance statistics; Elba Dreaming's e-mail provider, for receiving and storing messages. A message you send also passes through your own mail app and e-mail provider, which you choose and control. Data may be disclosed to the competent authorities only where required by law.

Transfers outside the European Union

Vercel and the e-mail provider also operate outside the European Union, in particular in the United States, so some data may be processed in third countries. Where this happens, the transfer relies on the safeguards provided for in Chapter V of the GDPR that the providers have put in place, such as a European Commission adequacy decision or the standard contractual clauses approved by the Commission.

Cookies and third-party content

This site does not use cookies, whether technical or for profiling, or any other tracking tools; that is why there is no cookie banner. The site does not embed third-party content: its fonts are hosted on the site itself, and there are no maps, embedded videos, widgets or social media buttons. The only resources loaded from an address other than the site are the apartment photos, delivered from the site's Vercel Blob store.

Links to external sites (for example Google Maps) lead to services that apply their own privacy policies; nothing is loaded from those sites until you open the link.

Your rights

At any time you may request access to your personal data, their rectification or erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest (Arts. 15–21 GDPR). To exercise these rights, simply write to info@elbadreaming.it; you will receive a reply without undue delay and in any case within one month of receipt of the request. No automated decision-making, including profiling, takes place.

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU Member State where you habitually reside or work, or where the alleged infringement took place.

Updates

This notice may be updated, for example if the site or the providers it uses change. The version in force is always the one published on this page, with the date of the last update shown at the top. In case of any discrepancy between language versions, the Italian text prevails.