Privacy Policy

Draft pending legal review. Controller details will be filled in before go-live.

1. Data Controller

The data controller is the owner of Nemus Alpine Living, Via Valle 5, 38033 Cavalese (TN), Italy. CIN: IT022050C2JO7AHLN9. To exercise your rights under the GDPR, write to the email address listed in the Contact section of the site.

2. Data Collected

Through the contact form we collect the following personal data:

  • Name
  • Email address
  • Phone number (optional)
  • Number of guests
  • Check-in and check-out dates
  • Optional message

In addition, for security and abuse-prevention purposes, the visitor's IP address is recorded at the time of form submission and stored in temporary logs for 30 days.

3. Purposes of Processing

Data is processed solely to:

  • respond to the inquiry submitted via the form;
  • provide information about availability and the stay;
  • prevent form abuse (IP-based rate limiting, anti-bot verification via Cloudflare Turnstile).

4. Legal Basis

The legal basis for processing is the explicit consent given by ticking the acceptance checkbox in the form, pursuant to Art. 6(1)(a) of Regulation (EU) 2016/679 (GDPR).

5. Retention Period

Data collected via the form is retained for as long as necessary to handle the request and for a maximum of 12 months from receipt, after which it is deleted.

6. Third Parties

For the technical operation of the site we rely on the following providers (all bound by GDPR-compliant data processing agreements):

  • Cloudflare, Inc. — hosting (Cloudflare Pages), CDN, anti-bot (Turnstile), rate limiting (KV). EU servers where possible.
  • Resend, Inc. — transactional email delivery. Cross-border transfer covered by Standard Contractual Clauses.
  • Mapbox, Inc. — static map for location display. No cookies are set on our domain.

We do not use intrusive analytics tools or third-party advertising trackers.

7. Your Rights

You have the right to:

  • access your personal data;
  • request rectification or erasure;
  • restrict processing;
  • data portability;
  • object to processing;
  • lodge a complaint with the relevant data protection authority.

To exercise these rights, simply write to the address listed in the Contact section.

8. Changes

This policy may be updated. The current version is always the one published on this page.

Last updated: May 2026.

💬