Privacy policy

Last updated: 8 October 2026

This notice explains how we process the personal data of people who visit the Casa Midea website and of people who contact us for information or bookings, in accordance with Article 13 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 ("Privacy Code").

1. Data controller

The data controller is Mariacristina Falciano, who runs the Casa Midea guest accommodation at Rione Principessa Margherita, 4, 80040 Terzigno (NA), Italy.

For any question about your data you can write to mideacasavacanze@gmail.com or call +39 377 361 4030.

2. What data we process

Browsing data

Like any website, the server hosting this site automatically records some technical data about visits: IP address, date and time, page requested, browser type and operating system. This data is only used to run the site and keep it secure; we do not use it to identify or profile you.

Cookie preferences

The choice you make in the cookie banner is saved in your browser's local storage (localStorage), on your device, so that the banner is not shown again on every visit. It is not sent to us.

Data you give us when you contact us

This site has no contact forms or private areas. If you call us, email us or send us a WhatsApp message, we will process the data you share with us (for example your name, phone number, email address, dates of stay, number of guests and any requests) in order to reply and manage your booking.

Guest data

When you stay with us, Italian law requires us to collect the details of our guests' identity documents and report them to the police (Questura) through the "Alloggiati Web" service (Article 109 of the Consolidated Public Security Act, T.U.L.P.S.), and to handle tax obligations. This data is processed only for these purposes.

Video surveillance

For the safety of guests and property, the common areas of the property (entrance hall and private car park) are covered by video surveillance. There are never any cameras inside the rooms. The monitored areas are marked with signs. Footage is viewed only by the controller and may be handed over to the judicial authorities or the police if necessary.

3. Why we process it and legal basis

• Running the site and keeping it secure (browsing data): the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Replying to requests and managing bookings: steps taken before entering into a contract, or performance of the accommodation contract (Art. 6(1)(b) GDPR).
• Legal obligations (reporting to the police, tax and accounting obligations): compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Video surveillance of common areas: the controller's legitimate interest in protecting the safety of people and property (Art. 6(1)(f) GDPR).
• Displaying the Google Maps map: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Providing your details for a booking is necessary: without them we could not reply or host you. Guest data required by law is mandatory.

4. Who we may share it with

Your data is processed by the controller and is never sold or published. It may be processed by the following parties, only for the purposes described:

• OVH SAS (Roubaix, France), the site's hosting provider, which stores browsing data on servers located in the European Union.
• Google, only if you consent to loading the Google Maps map. See Google's privacy policy.
• WhatsApp (Meta), if you choose to contact us via WhatsApp.
• Booking.com, if you book through that platform: in that case Booking.com processes your data as an independent controller, under its own privacy policy.
• Our accountant and advisers, for tax and accounting obligations.
• Public authorities (police, municipality, Italian Revenue Agency), where required by law.

5. Transfers outside the European Union

Google (only if you load the map) and Meta (only if you contact us via WhatsApp) may process some data in the United States. These transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, which both companies have joined, or on other safeguards provided for by the GDPR.

6. How long we keep it

• Browsing data: for the period set by the hosting provider for technical and security reasons, unless needed to investigate possible offences.
• Information requests that do not lead to a booking: for as long as needed to reply, and in any case no longer than 12 months.
• Booking data: for the duration of the relationship and, for tax and accounting records, for 10 years as required by law.
• Video surveillance footage: for a limited period of a few days, after which it is deleted automatically, unless it is needed to respond to a request from the judicial authorities or the police.
• Cookie preferences: in your browser, until you delete or change them.

7. Your rights

At any time you can ask the controller, using the contact details in section 1, for:

• access to your data and a copy of it;
• correction of inaccurate data or completion of incomplete data;
• erasure of your data, where it does not have to be kept by law;
• restriction of processing;
• portability of the data you have given us;
• to object to processing based on legitimate interest;
• to withdraw any consent you have given (for example for the map), without affecting processing carried out before the withdrawal.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

8. Cookies

For information about cookies and third-party content, see our cookie policy. You can change your choices at any time: open cookie preferences.

9. Changes to this notice

This notice may be updated. The date of the latest change is shown at the top of the page.