DaDa Villa

Privacy and cookie policy

How we handle your data when you visit the site, write to us or book. Updated October 2026.

Data controller

Carlo Rabaiotti, Firststrasse 3, 8125 Zollikerberg, Switzerland. Email: prenota@dadavilla.com.

Date requests

When you use the "Request dates" form we receive by email your name, email, phone (optional), dates, number of guests and message. We use them only to reply and to prepare the offer and contract (Art. 6(1)(b) GDPR, pre-contractual steps).

Online booking and payments

For an online booking we process name, email, phone, dates and number of guests. Payments, balance and security deposit go through Stripe (Stripe Payments Europe Ltd., Ireland): you enter your card details directly with Stripe and we never see them. Legal basis: performance of the contract and accounting obligations (Art. 6(1)(b) and (c) GDPR).

During your stay

Italian law (Art. 109 TULPS) requires us to report the identity document details of guests to the police (Questura); data for the tourist tax goes to the municipality of Quartu Sant'Elena (Art. 6(1)(c) GDPR).

Reviews

If you write a review we publish, with your consent, your name, country, month of stay, rating and text. Your email is never published: we use it only to check your stay. You can ask us to remove your review at any time (Art. 6(1)(a) GDPR). To prevent spam we keep an encrypted fingerprint of your IP address for 24 hours.

Calendar sync with Booking.com

The site's calendar is synchronised with Booking.com. Only booked dates are exchanged, with no names or other personal data.

Map

The map on the House info page is provided by Google Maps (Google Ireland Ltd.) and only loads if you click "Show the map". From then on Google receives your IP address and may use cookies (Art. 6(1)(a) GDPR).

Server

The site is hosted by OVH (OVH SAS, France), which logs technical data such as IP address, date and page visited for security (Art. 6(1)(f) GDPR). Fonts are hosted on our own server: visiting the site loads nothing from third parties.

The site uses no profiling, analytics or marketing cookies and sets no cookie when you visit it. That is why no consent banner is needed (Italian Data Protection Authority, cookie guidelines of 10 June 2021). Cookies can only appear in these cases:
• Google Maps: only after you click "Show the map" on the House info page; nothing is loaded from Google before that (third-party cookies, policy at policies.google.com).
• Stripe: on the payment pages, which are on Stripe's own domain; Stripe uses technical cookies needed for payment security (policy at stripe.com/privacy).
• Owner's admin area: a technical session cookie, only for the owner when he logs in; visitors never receive it.
You can delete or block cookies at any time in your browser settings.

How long we keep data

Requests that do not lead to a booking: at most 24 months. Booking data and accounting records: as long as the law requires (up to 10 years). Reviews: as long as they are published.

Who receives data

Only those needed for the purposes above: Stripe, OVH, Booking.com (dates only), Google (only if you open the map) and the authorities mentioned. The controller is based in Switzerland, a country recognised by the EU as providing adequate data protection.

Your rights

You can ask for access, rectification, erasure, restriction, data portability, object to processing or withdraw a consent you gave, by writing to prenota@dadavilla.com. You also have the right to complain to the Italian data protection authority (garanteprivacy.it) or to the Swiss Federal Data Protection and Information Commissioner.