Privacy policy
This page explains how we process the personal data of visitors to the website and of guests who book a stay, in accordance with Regulation (EU) 2016/679 (GDPR).
Data controller
Federica Spada
Via Giuseppe Martucci 35, 80121 Napoli (Italia)
Tax code (codice fiscale): SPDFRC66M42F839P
Email: fspada@aminarubinacci.it · Phone: +39 392 989 2422
What data we collect
- Booking: first name, last name, email, phone, number of adults and children, dates of stay, arrival time and any notes.
- Payment: payments are handled by Stripe. Card details are entered directly into Stripe’s systems: we never see or store them. We only receive the payment result and a transaction reference.
- Contact form: name, email, phone if provided, any dates and the text of your message.
- On arrival: as required by Italian law, we ask for an identity document of each guest to register guests with the police (Questura) and for the city tax.
- Technical data: IP address, browser type, pages visited and times, recorded automatically by the server for security and to run the website.
Why we use the data
| Purpose | Legal basis |
|---|---|
| Managing the booking, payment, communications about the stay and any refunds | Performance of a contract (Art. 6(1)(b) GDPR) |
| Legal obligations: tax and accounting, guest registration with the police, city tax | Legal obligation (Art. 6(1)(c) GDPR) |
| Replying to messages sent through the contact form, by email or by phone | Request of the data subject (Art. 6(1)(b) GDPR) |
| Website security and prevention of payment fraud | Legitimate interest (Art. 6(1)(f) GDPR) |
We do not use your data for advertising and we never sell it. We only write to you about the stay you booked or to reply to your messages.
Booking data is required: without it we cannot confirm your stay.
Who we share the data with
- Stripe Payments Europe Ltd. (Ireland), for payments and fraud prevention. Stripe privacy policy
- Aruba S.p.A. (Italy), which hosts the website and its data.
- The email service we use to send confirmations and reply to messages.
- Public authorities (police, municipality, tax authority), where required by law.
- Google Ireland Ltd., for the website fonts (Google Fonts): your browser downloads them from Google’s servers, which receive your IP address. Google privacy policy
- Google Ireland Ltd., for the maps on the accommodation pages (Google Maps), only if you accept cookies: the map is downloaded from Google’s servers, which receive your IP address and may set their own cookies. Google privacy policy
Some of these providers (for example Stripe and Google) may transfer data outside the European Union, including to the United States. Such transfers take place with the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep the data
- Booking and payment data: for the duration of the stay and then for 10 years, for tax and accounting obligations.
- Contact form messages not followed by a booking: up to 24 months.
- Technical browsing data: only as long as needed for website security.
Your rights
You can ask at any time to access, correct or delete your data, restrict its use, receive it in a readable format or object to its processing. Write to fspada@aminarubinacci.it. If you believe your data is not being processed correctly, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookies
The website only uses technical cookies. All the details are in the Cookie policy.
Last updated: 29 September 2026.