PRIVACY POLICY

EFFECTIVE DATE: 07/11/2026

INTRODUCTION & ORGANIZATIONAL INFO

We, at Casa Nannina Capri are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website casananninacapri.com, and any related interactions. Our primary goals in processing this information include:

  • Enhancing the user experience on our platform by understanding customer needs and preferences.
  • Providing timely support and responding to inquiries or service requests.
  • Improving our products and services to meet the evolving demands of our users.
  • Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and integrity of your personal information, while enabling us to deliver the services you trust us with.

We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. Should you have any questions or require further information about how we manage personal information, please feel free to contact us at [email protected].

Your privacy is our priority. We are committed to processing your personal information transparently and with your safety in mind. This commitment extends to our collaboration with third-party services that may process personal information on our behalf, such as in the case of sending invoices. Rest assured, all activities are conducted in strict compliance with applicable privacy laws.

SCOPE AND APPLICATION

Our privacy policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers. Whether you are just browsing our website casananninacapri.com, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security. This policy outlines our practices and your rights related to personal information.

DATA WE COLLECT THROUGH THE WEBSITE

  • Contact form: when you write to us, we receive your first name, last name, email address and message, and use them only to reply to you.
  • House bookings: when you book Casa Nannina directly, your booking details are collected by our booking engine, eviivo.
  • Experience bookings: when you book and pay for an experience, we receive your name, email address, phone number, any notes you add and the booking details (experience, date, time, number of guests). Payments are processed by Stripe on its secure payment page: we never see or store your card details. We use this information to arrange and confirm your experience with our local partners.
  • Customer account: if you create an account, we store your email address, name, phone number and an encrypted version of your password with Supabase, our account provider. If you sign in with Google, we receive your name and email address from Google. We use your account to show your bookings and saved payment methods; saved cards are kept by Stripe, never by us.

DATA STORAGE AND PROTECTION

DATA STORAGE

  • Personal information is processed with the following providers: the website is hosted by Cloudflare; messages sent through the contact form are delivered by Resend (servers in the European Union, Ireland) to our mailbox, hosted by Google Workspace; direct bookings of the house are managed through eviivo; payments for experiences are processed by Stripe, and booking emails are sent through Resend; customer accounts are managed by Supabase, with servers in London (United Kingdom, a country the European Commission recognises as providing adequate data protection). For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.
  • Data Hosting Partners: We partner with reputable data hosting providers committed to using state-of-the-art security measures. These partners are selected based on their adherence to stringent data protection standards.

DATA PROTECTION MEASURES

Access Control: Access to personal information is strictly limited to authorized personnel who have a legitimate business need to access the data. We enforce strict access controls and regularly review permissions. Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.

DATA PROCESSING AGREEMENTS

When we share your data with third-party service providers, we do so under the protection of Data Processing Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data protection laws. These agreements mandate that third parties implement adequate technical and organizational measures to ensure the security of your data.

TRANSPARENCY AND CONTROL

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how we share and disclose personal information, please reach out to us at [email protected].

USER RIGHTS AND CHOICES

At Casa Nannina Capri, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Your Rights:

  • Right of Access (Article 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
  • Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
  • Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
  • Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
  • Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
  • Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
  • Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

EXERCISING YOUR RIGHTS

To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

COOKIES AND TRACKING TECHNOLOGIES

At Casa Nannina Capri, we value your privacy and are committed to being transparent about our use of cookies and other tracking technologies on our website casananninacapri.com.

HOW WE USE THESE TECHNOLOGIES

  • Technical storage: our website only uses the storage strictly necessary for it to work, such as remembering the experiences in your cart. It does not require consent.
  • No analytics or advertising: we do not use analytics, advertising or social media tracking on our website.
  • Third-party content: the map at the bottom of each page is provided by Google Maps, which sets its own cookies when the map is shown. We load it only if you accept cookies in the banner, and you can change your choice at any time with “Cookie Settings” at the bottom of every page.

We may update our use of cookies and tracking technologies to improve our services or comply with legal requirements. We will notify you of any significant changes and seek your consent where necessary.

For more detailed information about the cookies we use, their purposes, and how you can manage your preferences, please visit our detailed Cookie Policy.

Should you have any questions or concerns about our use of cookies and tracking technologies, please do not hesitate to contact us at [email protected]. Your privacy and the integrity of your personal data are of utmost importance to us.