Privacy and Cookie Policy

This policy explains how we process the personal data of users who browse ilfieniledimanerba.com and who use the contact and booking‑request forms, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.

Data Controller

Il Fienile di Manerba — short‑term holiday rental Via IV Novembre, 86 25080 Manerba del Garda (BS), Italy CIN: IT017102C24HFJ8N4Y · IT017102C28G8QRY2A Email: ilfieniledimanerba@gmail.com Phone: +39 333 2108518

For any privacy‑related request, or to exercise your rights, please write to the email address above.

Purposes, legal bases and retention

Personal data is processed for the purposes below, each with its legal basis and retention period.

Purpose	Legal basis (Art. 6 GDPR)	Retention
Responding to information and contact requests	Consent or pre‑contractual steps taken at your request	As long as needed to handle the request, up to 24 months
Managing booking requests and the services requested	Performance of a contract or pre‑contractual measures	Duration of the relationship and subsequent statutory terms
Meeting legal, tax and accounting obligations	Legal obligation	10 years, as required by tax law
Measuring website usage in statistical form (analytics)	Consent	Per the provider’s retention, subject to consent

Types of data collected

• First and last name
• Email address
• Phone number
• Information you voluntarily provide in the forms (e.g. stay dates, number of guests, notes)
• Browsing data and identifiers (cookies and similar technologies), only with consent for non‑essential ones

Providing the data marked as required in the forms is necessary to handle your request; without it we cannot reply or manage the booking. Other data is optional.

Processing methods

Data is processed using electronic and, where necessary, manual tools, applying technical and organisational measures appropriate to protect the confidentiality, integrity and availability of the data and to prevent unauthorised access.

Recipients and processors

To deliver its services the Controller relies on providers that process data on its behalf, appointed as data processors under Art. 28 GDPR:

• Basin (Moonshot Ventures, Inc., Canada) — handling and delivery of the contact and booking‑request forms.
• Google Ireland Ltd / Google LLC — Google Analytics 4 (usage statistics, with IP anonymisation) and email (Gmail) for receiving requests.
• Microsoft Corporation — Microsoft Clarity, a behavioural analytics tool that may include aggregated session recordings and heatmaps.
• CookieHub ehf. — management of the cookie consent banner and preferences.
• Vercel Inc. — website hosting and delivery, with content served from a datacenter located in Europe (Frankfurt, Germany).
• Enterprise Srl — website development, technical management and maintenance (web master). Registered office: Via Arnoldo Bellini 7, 25077 Roè Volciano (BS), Italy; VAT/Tax code 03959590989; email info@nebu.it; certified email (PEC) enterprisesas@certificazioneposta.it; phone 0365 599293.

Data is not disclosed publicly nor sold to third parties for marketing. It may be shared with public authorities where required by law.

Transfers outside the EU/EEA

Some providers (Google, Microsoft) are based in or use infrastructure in the United States: any transfers take place under adequate safeguards pursuant to Art. 44 ff. GDPR, such as the European Commission’s Standard Contractual Clauses and/or certification under the EU‑U.S. Data Privacy Framework. Basin (Moonshot Ventures, Inc.) is based in Canada, a country recognised by the European Commission as providing an adequate level of protection (adequacy decision).

Your rights

At any time you may exercise the rights set out in Art. 15‑22 GDPR:

• Access to your data and information about the processing.
• Rectification of inaccurate data or completion of incomplete data.
• Erasure (“right to be forgotten”) where applicable.
• Restriction of processing.
• Portability: receiving your data in a structured, commonly used, machine‑readable format.
• Objection to processing on legitimate grounds.
• Withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Requests can be sent to the Controller’s email and will be answered within the statutory time limits.

Supervisory authority

If you believe your rights have been infringed, you may lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) — or with the supervisory authority of your country of residence.

Minors

The site is not directed to children under 16 and does not knowingly collect their data. If we become aware of having collected such data without a valid legal basis, it will be deleted without undue delay.

Automated decision‑making and profiling

The Controller does not carry out automated decision‑making or profiling within the meaning of Art. 22 GDPR.

Changes to this policy

The Controller may update this policy to reflect legal changes or changes to the services offered. The current version is always published on this page, together with the last‑updated date.

---

Cookie Policy

What are cookies

Cookies are small text files that websites store on the user’s device to make pages work, remember preferences and gather statistics. Similar technologies (e.g. pixels and local storage) are treated as cookies.

How we handle consent

On your first visit a banner (CookieHub) lets you accept, reject or customise the categories. Non‑essential cookies — including analytics — are only activated after consent has been obtained; without consent they are not loaded. You can change or withdraw your choices at any time via the banner or your browser settings.

Categories of cookies used

Category	Provider	Purpose	Typical duration
Essential/technical	Il Fienile di Manerba · CookieHub	Site operation and storing consent preferences	Session – 12 months
Analytics	Google Analytics 4	Aggregated usage statistics, with anonymised IP	Up to 24 months
Behavioural analytics	Microsoft Clarity	Interaction analysis, heatmaps and aggregated session recordings	Up to 12 months

Analytics cookies are activated only after consent. For details on processing by the providers, please refer to their respective policies (Google, Microsoft).

Managing cookies in the browser

In addition to the banner, you can block or delete cookies from your browser settings. Disabling essential cookies may impair some site features.

Last updated

11 June 2026