Il Capolavoro

Notice

Privacy and cookies

This website collects little data: what you write to us when asking for dates and, only if you allow it, what is needed to send you offers and show you our ads. Details below. Last updated 26 September 2026.

Who handles your data

The data controller is Il Capolavoro, run by Silvia and Massimo, Via Vassale 43, Loc. Bagnola, 19032 San Terenzo di Lerici (SP), Italy. For any question about your data: ilcapolavorolerici@gmail.com, +39 349 5232637.

What we collect and why

  • Availability request. If you fill in the form you send us the house, dates, number of guests, your name, email and/or phone and any notes. We use them only to reply and, if you book, to organise your stay. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
  • Sending by email. Your request reaches our inbox through Resend, an email service acting on our behalf. If it is unavailable, your own email app opens with the message ready and you send it yourself.
  • Sending by WhatsApp. The WhatsApp button opens the app with the message already written: the site sends nothing. From then on WhatsApp’s (Meta’s) privacy policy applies.
  • Availability check. When you pick dates, the site asks our server whether the house is free, by reading the calendar of our Airbnb listing. Only the house and dates are sent, no personal data.
  • Chat with Silvia. Answers are worked out in your browser: what you type is not sent or stored.
  • Visit statistics. We use Vercel Web Analytics, which counts visits in aggregate, anonymous form, without cookies and without identifying you. Legal basis: our legitimate interest in knowing whether the site works (Art. 6(1)(f) GDPR).
  • Server logs. The site is hosted by Vercel Inc., which, like any server, keeps technical connection data (such as the IP address) for security for a limited time.

Offers and remarketing, only if you choose

The form has an optional box, never pre-ticked: your request is sent either way. If you tick it, we will use your name, email and phone to send you offers and news by email or WhatsApp and to show you our ads on Facebook, Instagram and Google. For the ads we upload your contact details, in encrypted form, to Meta’s and Google’s advertising platforms, which use them only to match you with their users.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us, replying “stop” on WhatsApp or using the link at the bottom of every email; withdrawal does not affect what was done before. If you do not tick the box, your data is used only to reply to you.

Who receives it

Only us. Requests arrive in our Gmail (Google) inbox. Resend, Vercel and Google are technical providers processing data on our behalf. If you gave marketing consent, your contact details also reach Meta Platforms Ireland and Google Ireland for advertising, and marketing cookies (if you accept them) reach Meta and Google. Some of these providers are based in the United States: transfers rely on the safeguards provided by the GDPR (EU-U.S. Data Privacy Framework or standard contractual clauses). We never sell or share your data.

How long we keep it

We keep requests as long as needed to reply and manage your stay. If no stay follows, we delete them within 12 months. Marketing consent lasts until you withdraw it: we keep the contact details of those who gave it for at most 24 months after their last contact with us, then delete them. Data of guests who stay is kept as long as the law requires (for example police registration and tourist tax).

Technical, always on. A browser memory (sessionStorage) remembers, until you close the tab, that Silvia’s chat has already introduced itself; another (localStorage) remembers your cookie choice for six months. They need no consent and do not identify you. Visits are counted without cookies.

Marketing, only if you accept. When the Meta Pixel or the Google Ads tag is active on the site, a banner asks your permission before loading them. If you accept, Meta and Google use cookies to measure requests coming from our ads and to show you our houses on other sites. If you reject or close the banner with the X, nothing is loaded. You can change your mind at any time from “Cookie preferences” at the bottom of every page.

Other services

The typeface is hosted on our own site: no data is sent to Google Fonts or anyone else. Links to Airbnb, Booking, Google Maps, WhatsApp and other external sites open on those sites, where their own policies apply.

Your rights

You can ask us at any time to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format (Arts. 15–22 GDPR). Just write to us. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live.