Legal information
Privacy Policy
This policy describes how the personal data of people who visit the website of Apulia Suite (Castellana Grotte) and of those who contact the property through the published contact details is processed.
Data controller
Apulia Suite di Giuseppe Manghisi
Via Andrea Angiulli 22, 70013 Castellana Grotte (BA), Italy
VAT no. IT08566530724 — CIN IT072017B400060732 — CIR BA07201742000023594
Phone +39 347 420 5974 — Email apuliasuite1@gmail.com
The website does not collect personal data
This website is an informational showcase: it contains no forms and does not ask for or record the name, email address, telephone number or any other identifying data of its visitors. The calendar populates itself: when the Book section comes into view, the website asks its own servers which days of the displayed month are free, without the visitor having clicked anything. Pressing Check availability then sends the two selected dates. In both cases only dates are transmitted: no data identifying the visitor is sent or stored. As happens with any web page, however, the server that answers receives the technical connection data, including the IP address: see the section “Where the pages are hosted”.
The website does not use profiling cookies, analytics tools or third-party trackers: no browsing data is collected for analytical or advertising purposes.
When you contact us
Booking does not take place on the website: guests contact the property by telephone, WhatsApp or email, using the published contact details. At that point the controller processes the data the guest voluntarily provides (name, contact details, stay dates and preferences) for the sole purpose of replying to the enquiry and managing any resulting stay. The legal basis is the performance of pre-contractual measures taken at the request of the data subject and, where a stay takes place, compliance with legal obligations relating to taxation and to the reporting of guests to the public security authorities (Article 6(1)(b) and (c) of Regulation (EU) 2016/679).
Guests who choose WhatsApp as their contact channel are also subject to the processing of their number by Meta Platforms Ireland Ltd., under the terms and privacy policy of WhatsApp. Anyone who prefers to avoid this can use the telephone or email instead.
The data provided is not disclosed or sold to third parties for commercial or marketing purposes. It is kept for as long as necessary to manage the stay and to comply with the related tax and accounting obligations.
Where the pages are hosted
The website’s pages are delivered through Cloudflare Pages (Cloudflare, Inc.), which acts as hosting provider and content delivery network (CDN). In order to serve the pages and protect the site, Cloudflare processes technical connection data, including the visitor’s IP address. This processing may also take place on servers located outside the European Union, on the basis of the Standard Contractual Clauses approved by the European Commission. The legal basis is the controller’s legitimate interest in delivering and protecting the service (Article 6(1)(f)). Cloudflare acts as data processor.
The availability calendar is served by a Postgres database managed by Supabase, hosted in the eu-central-1 region (Frankfurt, Germany). It records only the dates blocked by the owner; like any service reached over the network, Supabase processes the technical connection data needed to answer the request. Supabase acts as data processor pursuant to Article 28 of Regulation (EU) 2016/679.
The typefaces are hosted directly on this website: displaying them does not involve any connection to third-party servers.
The owner’s private area
The website includes a private area, not indexed by search engines and accessible only to the owner of the property, used exclusively to block and unblock dates in the calendar. A single account has access to it, whose credentials are managed by Supabase’s authentication service. This area does not process any guest data.
Rights of the data subject
Data subjects may exercise at any time the rights set out in Articles 15-22 of Regulation (EU) 2016/679: access, rectification, erasure, restriction of processing, objection and data portability. They also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
To exercise these rights, you may write to apuliasuite1@gmail.com or call +39 347 420 5974.
Last updated: 24 August 2026.