Privacy notice

1. Data controller

Casteltesino Camping S.r.l., Località Sottomolizza 1, 38053 Castello Tesino (TN), Italy, VAT and tax number 02330820222, REA TN-216860, email info@casteltesinocamping.it, certified email casteltesino@pec.it.

2. Data we process

• Essential technical data related to page and asset requests, such as IP address, date and time, user agent, and security logs managed by the hosting infrastructure.
• Google Analytics 4 data, only with consent: visited pages, scrolls, outbound clicks, form interactions, language, browser, device, and approximate location. Custom events cover CTAs, WhatsApp openings, and prepared requests and do not contain names, phone numbers, email addresses, message content, or stay details.
• Language preference and a temporary copy of promotions stored locally in the browser.
• Data you enter in the stay request: accommodation, dates, guests, pets, name, phone number, email, and notes.
• Credentials and session data solely for authorised staff accessing the administration area.

3. Stay requests and contacts

The website form processes data only in your browser. When you select “Prepare request on WhatsApp”, WhatsApp opens with a pre-filled message. Data is disclosed to WhatsApp and the campsite only if you continue and send it.

If you contact us by phone, email, certified email, or social network, processing continues through the channel you selected and under that provider's terms.

4. Purposes and legal bases

• Responding to availability, information, and booking enquiries and taking pre-contractual steps requested by you.
• Managing bookings and purchased services, performing the contract, and meeting administrative, accounting, and tax duties.
• Maintaining security and service continuity and preventing abuse based on the controller's legitimate interests.
• Measuring visits, page usage, and CTA effectiveness with Google Analytics 4 based on consent, which can be withdrawn at any time in cookie preferences.
• Meeting legal obligations and requests from competent authorities.

5. Recipients and international transfers

Data may be processed by authorised staff and strictly necessary service providers, such as hosting, technical support, and the communication channels selected by the user. We do not sell personal data or use it for behavioural advertising.

With analytics consent, Google LLC processes measurement data to provide Google Analytics 4. For users in the European Economic Area, the IP address is used on European servers to derive approximate location and is discarded before logging. Subsequent transfers follow Google's terms and safeguards.

WhatsApp, Instagram, and Facebook are Meta Platforms services. When you open these links, data may also be processed outside the European Economic Area under the safeguards and notices provided by the relevant provider.

6. Retention

• Information enquiries are kept for as long as needed to respond and for any related pre-contractual follow-up. If an enquiry results in a booking, the retention periods for that booking apply.
• Booking, invoicing, and compliance data is kept for the periods required by civil, accounting, and tax law, normally 10 years.
• Technical and security logs are kept for the period set by the hosting provider or for as long as needed to investigate incidents and abuse.
• Google Analytics user-level and event-level data is set to a 2-month retention period. The _ga and _ga_<measurement ID> cookies may last up to 2 years unless consent is withdrawn, browser data is cleared, or the browser applies a shorter limit.
• Browser technologies follow the durations shown in the Cookie Policy and can be deleted in browser settings.

7. Your rights

Where provided by the GDPR, you may request access, rectification, erasure, restriction, portability, and object to processing. You may also lodge a complaint with the Italian Data Protection Authority or your local supervisory authority. To exercise your rights, write to info@casteltesinocamping.it or casteltesino@pec.it.

8. Children's data

Children's ages are used only to prepare an appropriate stay proposal and must be provided by a parent or person with parental responsibility. We do not ask for children's names or direct contact details.

9. Updates

We update this notice whenever services, providers, or processing practices change. The date at the top identifies the published version.