Privacy notice
Who handles the personal data collected through this website and when you contact GIO HOME, why, for how long, and what your rights are.
1. Data controller
The data controller is Giovanna Valerio, reachable at the property address and by email at stars.79@hotmail.it, who runs the GIO HOME tourist rental at Via Leone Pancaldo 6, staircase C, 37138 Verona, Italy (CIN IT023091B4DFNZGRG7).
- Privacy requests
- prenotazioni@giohomeverona.it
- Bookings and questions about your stay
- prenotazioni@giohomeverona.it
WhatsApp and phone +39 339 543 9419
2. What data we process
- Browsing data: IP address, date and time, page requested, browser type and operating system. The server logs them to run and protect the website; we don't use them to identify you.
- Details you send us when you contact us on WhatsApp, by email or by phone: for example your name, phone number or email address, your message, your stay dates and the number of guests.
- Guest data required by law: personal details and ID document details of every guest. Please don't send them through this website: we'll tell you how to send them.
- Images from the camera at the apartment entrance, which covers only the access landing: they are used to identify guests on arrival and to monitor access. There are no cameras in the indoor spaces.
- Statistics on how the website is used, kept only as aggregate daily counters, with no IP address or identifiers (section 8).
We don't ask for special categories of data, such as health data: please don't send them.
3. Purposes and legal bases
- Replying to your requests and arranging your stay
- Legal basis Pre-contractual steps and contract (Art. 6(1)(b) GDPR)
- Registering guests with the police (Questura, Art. 109 of the Italian TULPS law) and meeting tax and tourist tax obligations
- Legal basis Legal obligation (Art. 6(1)(c) GDPR)
- Identifying guests on arrival by checking their face against their ID live through the camera at the entrance, as required for guest identification under Italian law (Art. 109 TULPS)
- Legal basis Legal obligation (Art. 6(1)(c) GDPR)
- Monitoring access to the apartment (camera at the entrance)
- Legal basis Legitimate interest in the security of the property and its guests (Art. 6(1)(f) GDPR)
- Running and protecting the website (server logs)
- Legal basis Legitimate interest in a secure, working website (Art. 6(1)(f) GDPR)
- Aggregate statistics to understand how to improve the website
- Legal basis Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
Giving us your contact details is optional, but without them we can't reply. ID document details are required by law: without them, the stay is not possible.
4. How we process data
We process data electronically and, where needed, on paper, with appropriate security measures and access limited to the people who run GIO HOME. We don't use the data for advertising or profiling, we don't take decisions based solely on automated processing, and we don't publish the data.
5. Who receives the data
- The website developer, who manages the website, hosting, mailbox and statistics system (GIO Stats) on our behalf and acts as data processor (Art. 28 GDPR). For hosting and email they use Aruba S.p.A. as a sub-processor, whose web space runs the website and the statistics. No other provider receives the statistics data.
- The email provider for the prenotazioni@giohomeverona.it mailbox: Aruba S.p.A., on the email plan run by the person who manages the website on our behalf. If you write to the data controller's personal address, that email is handled by Microsoft (Outlook.com) under its own privacy policy.
- If you message us on WhatsApp, the service is provided by WhatsApp Ireland Limited, which processes data as an independent controller under its own privacy policy.
- The police (Questura), through the State Police's Alloggiati Web service, and other public authorities where the law requires it.
- Other recipients: none; guest data is not shared with anyone other than those listed above.
- Links to Google Maps, WhatsApp and other websites open third-party services in a new tab: from then on, their own privacy notices apply.
We don't sell the data or pass it on to third parties for their own purposes.
6. Transfers outside the European Economic Area
The website and the prenotazioni@giohomeverona.it mailbox are hosted by Aruba S.p.A., a company based in Italy, on the plan of the developer who manages the website for us. We do not plan any transfer of data outside the European Economic Area (EEA).
WhatsApp, Microsoft (only if you write to the data controller's personal Outlook.com address) and Google (for Google Maps, only if you open the link) may transfer data outside the EEA under their own privacy policies, with the safeguards set out in the GDPR, such as adequacy decisions or standard contractual clauses.
7. How long we keep data
- WhatsApp messages and emails: they stay only in the mailbox and in the WhatsApp chat where they arrive, and are not copied into any register or other archive; if no stay follows, we delete them within 24 months of the last message, and you can ask us to delete them sooner by writing to prenotazioni@giohomeverona.it.
- Guest data and tax records: for as long as the law requires (public security, tax and tourist-tax obligations), then deleted.
- Server logs: up to 24 months, as set by the Aruba hosting plan.
- Images from the entrance camera: they are not recorded, as the camera is used only for live viewing.
- Statistics: we only keep aggregate daily counters, not linked to identified people: they are kept with no expiry date, to follow how the site is used over time. We do not store IP addresses, browser details or identifiers.
After these periods, data is deleted or anonymised.
8. Website statistics
To understand how the website is used we run GIO Stats, a small statistics system installed on the website's web space at Aruba, with no third-party services. When you open a page, your browser only sends our server: the page visited (without parameters), the page of this site or the domain you came from, the type of navigation (new visit, reload, back), any campaign parameters (utm) in the link and, during your visit, clicks on the main buttons (contacts, photo gallery, FAQ, language, external links recorded by domain only), how far you scroll and whether the house rules section comes into view. For WhatsApp, email and phone we only record that the button was used, never the message, number or address. From the request the server only works out the device type (smartphone, tablet or computer) and the browser's main language, then adds one to that day's counters: it does not store your IP address, browser type or any identifier, uses no cookies, writes nothing to your browser's storage to count you, and does not recognise returning visitors. The data is neither combined with other data nor shared with third parties.
If your browser sends Do Not Track or Global Privacy Control, nothing is collected.
Statistics only start if you accept them in the box shown on your first visit. You can change or withdraw your choice at any time with the “Statistics preferences” button.
9. Your rights
You can ask at any time to access, correct or erase your data, to restrict its processing or to receive it in a portable format, and you can object to processing based on legitimate interest (Articles 15–22 of Regulation (EU) 2016/679, GDPR).
You can withdraw your consent to statistics at any time; this does not affect processing carried out before.
To exercise your rights, write to: prenotazioni@giohomeverona.it. We reply without undue delay and in any case within one month of your request, as the GDPR requires.
If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).
Website of the Italian data protection authority (opens in a new tab)
10. Cookies and browser storage
This website uses no cookies for its visitors. The only cookie is a technical session cookie used by the site owner alone, when signing in with a password to the statistics panel. What the website stores in your browser, and why, is explained in the cookie policy.
Changes to this notice
If the processing changes, we update this page and the date below.
Last updated: 21 October 2026