Privacy Policy

How we handle your personal data

Last updated: 4 September 2026

This notice explains which personal data we collect through chacaril.com, why we collect it and what rights you can exercise. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

The data controller is Chacaril S.r.l., registered office at Frazione Pila, 8 — 11020 Gressan (AO), Italy. VAT no. 01286800071, Aosta Company Register REA no. AO-82290.

For any question about your data write to booking@chacaril.com or to the certified address chacarilsas@pro-pec.it, or call +39 0165 521215.

2. What we collect and why

We only collect what we need in order to reply to you and to run the site securely. We do not profile you and we take no automated decisions about you.

Data	Purpose	Legal basis	Retention
First and last name, email, phone (optional) and message text, entered in the form on the Contact page	Replying to your enquiry about information or a stay	Art. 6(1)(b) GDPR — pre-contractual steps at your request	Up to 24 months from the last contact, unless the enquiry becomes a booking
Browsing data logged by the server: IP address, date and time, page requested, browser type	Running the site, diagnosing faults, protecting it from abuse	Art. 6(1)(f) GDPR — legitimate interest in the security of the site	As long as our hosting provider keeps its logs, normally a few days
Language and season (summer/winter) preference, cookie consent choice	Showing you the site in the language and version you chose	Art. 6(1)(f) GDPR — technical cookies, no consent required	See the Cookie Policy

3. Providing your data

The fields marked as required in the contact form (name, email, message) are necessary for us to answer you: without them we cannot act on your request. The phone number is optional and is only used if you would rather be called back.

4. Who we share data with

Your data is never sold or passed to third parties for commercial purposes. It is accessible to authorised staff of Chacaril S.r.l. and to the providers that help us deliver the service, appointed as processors under Art. 28 GDPR:

Vercel Inc. — website hosting and technical logs.
Resend (Plus Five Five, Inc.) — delivery of the emails generated by the contact form.
Google Ireland Ltd. — the map embedded in the Contact page, which loads only after your consent.

5. Bookings

Bookings are not completed on this site. The "Book" button takes you to the Beddy booking engine hosted at chacaril-pila.beddy.io: it is a separate site with its own privacy notice, which we invite you to read. The data you enter there is used to manage your stay and is processed by Chacaril S.r.l. as controller, with Beddy acting as processor.

6. Transfers outside the European Union

Some of the providers listed above are based in the United States or store data there. In that case the transfer relies on the European Commission adequacy decision (EU-US Data Privacy Framework) or on Standard Contractual Clauses, with the supplementary safeguards required by Art. 44 ff. GDPR.

7. How we protect your data

The site is served exclusively over an encrypted connection (HTTPS). The reserved area is protected by credentials and its session is held in a technical cookie that JavaScript cannot read. Contact form data is not stored in a website database: it travels as email to booking@chacaril.com.

8. Your rights

At any time you may ask us for access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest (Arts. 15-22 GDPR). Just write to booking@chacaril.com and we will answer within one month.

If you believe the processing infringes the GDPR you may lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of the country where you live.

9. Changes to this notice

If we change the way we handle data we will update this page and the date shown at the top. Please check back from time to time.