Privacy Policy

AZ. AGR. LA MORA DI MAZZOLI GIUSEPPINA E PAOLO SOC. SEMP. AGRICOLA, VAT number 03900200548, registered at Via Fonte Citerna 7, 06081 Assisi (PG), Italy. Contact: agriturismolamora@gmail.com, phone/WhatsApp 075 8041164.

Booking or information requests. If you write to us on WhatsApp (including through the site's request form, which prepares the message without storing it), by email, or call us to ask about availability or information, you deal directly with us: the site does not store this data in its own database, it only connects you with us. Name, contact details, stay dates, and any special requests (e.g. dietary needs, pets) are handled manually by the property’s staff to reply to the request, organise the stay, and comply with hospitality-related legal obligations (e.g. reporting to local authorities, tourist tax). Legal basis: performance of pre-contractual or contractual measures at your request (Art. 6.1.b GDPR), and, for legal obligations, Art. 6.1.c GDPR.

Booking via Bed-and-breakfast.it. The "Book now" buttons open a booking form provided by bed-and-breakfast.it (operated by Studio Scivoletto S.r.l. Unipersonale). This form loads only when you open it by clicking the relevant button, never automatically. Once open, you're inside bed-and-breakfast.it's own form: the data you enter there (name, contact details, any sign-in with a third-party account) is processed by them under their own privacy notice, not ours. Technical details in our Cookie Policy.

Offers, last-minute deals, and reviews badge from Bed-and-breakfast.it. Unlike the form above, this content loads on its own every time you visit the page it appears on (with no click), and your browser contacts bed-and-breakfast.it directly to display it: because of this, it stays off until you give consent to the Functional category in the cookie banner. Legal basis: consent (Art. 6.1.a GDPR), revocable at any time. Details in our Cookie Policy.

Payments. The site does not process online payments: no payment system (credit card, PayPal or similar) is integrated. Payment/deposit arrangements are agreed directly with us, outside the website.

Newsletter form. The form collects the email address you voluntarily enter, together with an explicit, separate consent that is never pre-checked. As of the publication of this notice, the form is not yet connected to an email-sending provider: the address you type is not saved or sent to any sending system. When we activate a real provider, we will update this notice to indicate who will process the address, for how long, and with which safeguards. Legal basis: consent (Art. 6.1.a GDPR), revocable at any time.

Anti-spam form protection (reCAPTCHA). We use Google reCAPTCHA v3 to protect the newsletter form from automated submissions. It only activates if you’ve given consent to the “Functional” category in the cookie banner, and involves sending technical data from your device to Google. Legal basis: consent (Art. 6.1.a GDPR). Details in our Cookie Policy.

Reviews. The Google reviews shown on the site are published directly on Google by users, under Google’s own rules: our site only reads them, read-only, via Google’s official API, without collecting or managing them in our own archive.

Virtual assistant (chatbot). The assistant on the site replies using pre-defined rules that we wrote: it is not connected to any external AI service, does not record conversations, and does not send any data to third parties. Its only links are direct links to WhatsApp or Google Maps, which only open if you click them.

Browsing data and technical logs. Like any website, our hosting provider automatically logs some technical data (IP address, browser type, pages visited, date and time) to ensure security and correct operation of the service. Legal basis: legitimate interest in ensuring service security (Art. 6.1.f GDPR).

Cookies and similar technologies. See our dedicated Cookie Policy for the full, verified list of what we actually use.

We do not sell or share the data you send us for commercial purposes. It may be accessed, within the limits of their respective roles, by:

• people who directly work in running the property;
• Vercel Inc., the hosting infrastructure provider the site runs on (processes technical browsing data as a data processor);
• Google LLC, for the reCAPTCHA anti-spam function (only with consent) and for reading Google reviews (read-only, without personal data of site visitors);
• Meta Platforms Ireland Limited (WhatsApp), if you choose to write to us via WhatsApp: the content of the messages you send is also subject to WhatsApp’s own privacy notice, which you accept by using that app;
• Studio Scivoletto S.r.l. Unipersonale (bed-and-breakfast.it), if you open the booking form, or if you give Functional consent that activates the offers/last-minute/reviews widgets: the data you enter in that form, or your HTTP request when that content loads, is processed by them under their own privacy notice;
• Octorate S.r.l., for the invisible Octorate booking-engine script (Trivago channel) present on every page: your browser downloads its files from octorate.com and unpkg.com, exposing your IP address; no cookies are set on our site;
• public authorities, when required by law (e.g. mandatory reporting related to tourist accommodation).

Google LLC and Vercel Inc. are based in the United States and may process data outside the European Economic Area. Both state that they adopt recognised safeguards for international data transfers (such as the European Commission’s Standard Contractual Clauses and/or adherence to the EU-U.S. Data Privacy Framework). For up-to-date details, please refer to their respective notices: Google and Vercel.

Data related to a booking or stay request is kept for as long as needed to handle the request and, where applicable, for the period required by tax, accounting, and public-security obligations linked to hospitality activity (the exact duration of these obligations depends on applicable tax law and should be confirmed with the property’s accountant).

The consent cookie is kept for 6 months. Other cookies/storage are listed with their duration in the Cookie Policy.

As a data subject, you have the right to ask us at any time for: access to your data, rectification, erasure, restriction of processing, data portability, and objection to processing, as well as withdrawal of a previously given consent (without affecting the lawfulness of processing already carried out). To exercise these rights, write to agriturismolamora@gmail.com.

For cookie preferences, you can also use the Cookie preferences button at the bottom of every page.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) if you believe the processing violates applicable law.

This notice may be updated to reflect changes to the site, the services used, or applicable law. The last-updated date is shown at the top of the page. If relevant changes to purposes or services require new cookie consent, the banner will reappear automatically.