What happens to your data

Who handles your data

The data controller is YLENIA PUCCINI, a sole proprietorship, registered at Via Adriano I n. 93, 00167 Roma, Italy — VAT 18212101002, business register REA RM-1772418, CIN IT058091C2KMJ4WXRE.

For anything to do with your data, write to info@charmeholidayspuccini.it, call +39 375 543 5284, or use certified e-mail: yleniapuccini@postecertifica.it.

What we collect, and when

This site has no forms: there is no field anywhere asking for your name, e-mail or phone number. We only receive data if you write to us or make a booking.

• If you write by e-mail or WhatsApp — we handle your name, the address or number you write from, and what you say, in order to reply and arrange your stay.
• If you book — the booking is not completed on this site. Pressing «Check availability» opens the Beddy engine, an external provider: booking data is collected by them, on their systems, and the payment goes through Stripe. Beddy passes us what we need to host you — name, contact details, dates, room, amount — and from that point on we are the controller of that data. How Beddy handles data on its own systems, and how the roles are divided between us, is governed by our contract with them and by Beddy's own privacy notice.
• When you arrive — Italian law requires us to record each guest's ID details and report arrivals to the police (art. 109 T.U.L.P.S.), alongside the statistical and tourism returns required by the Lazio Region and the City of Rome.

We do no profiling and we sell data to nobody. We do not send you advertising unless you ask for it.

Our legal basis

• To reply and to host you: performance of the contract and the steps leading to it (GDPR art. 6.1.b).
• For legal obligations: public security reporting, tax and statistical duties (art. 6.1.c).
• To run the site and the booking engine: our legitimate interest in offering a site that is safe and works (art. 6.1.f).

How long we keep it

• Messages that do not lead to a booking: as long as needed to reply and follow up, then deleted.
• Booking records and tax documents: for the period Italian tax and accounting rules require.
• Data reported to public security: as required by the rules that ask for it.

Who receives it

Only those needed to have you stay here:

• Beddy — the booking system and the engine you see on the page.
• Stripe — payments. The company is also based in the United States: transfers rely on the safeguards in Chapter V of the GDPR.
• Aruba — e-mail and the domain.
• Vercel — hosting for these pages.
• Our accountant and, where the law requires it, public authorities.

What you can ask for

You have the right to ask for access to your data, rectification, erasure, restriction of processing, portability, and to object to processing (GDPR articles 15 to 22). Write to info@charmeholidayspuccini.it: we reply within one month.

If you think something is wrong, you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali — garanteprivacy.it.

Cookies

Opening this site writes no cookie at all. We explain it, with the measurements, on the cookies page.

Last updated: 1 October 2026.