Privacy policy

Under Regulation (EU) 2016/679 ("GDPR"), this page describes how personal data ofeleutheria.world users is processed.

Data controller

ELEUTHERiA s.r.l.s, Viale Mecenate 5/M, 52100 Arezzo (AR), Italy. VAT no. 02475710519. Contact: info@eleutheria.world · certified email (PEC): eleutheria.srls@pec.it.

Data processed and purposes

• Data sent through our forms: for guests, name, email, optional phone number, chosen property, dates, number of guests and message; for owners, also the property’s location and features, current situation, objective and any listing link. We use it solely to answer the request and assess a booking or management engagement. Legal basis: pre-contractual measures requested by the data subject (art. 6.1.b GDPR).
• Contact data via WhatsApp, phone or email: processed to handle the communication you requested (art. 6.1.b GDPR).
• Technical browsing data (IP address, server logs, security data): processed by the hosting provider to deliver and secure the service. Legal basis: legitimate interest (art. 6.1.f GDPR).

Processing method and form delivery

Data entered in the form is transmitted encrypted (HTTPS) and delivered to our mailbox through the SMTP provider configured by the controller. Processing uses electronic tools with adequate security measures; there is no automated decision-making and no profiling.

Whether data is required

Fields marked as required are needed to identify and answer your request; without them we cannot handle it. Other fields are optional. Please do not enter identity documents, payment data or special-category data under art. 9 GDPR in the message.

Recipients and processors

Data may be processed on our behalf, as processors under art. 28 GDPR, by: thehosting and content-delivery provider (Cloudflare, Inc.) and theemail service provider we use to deliver requests. OpenStreetMap maps are loaded only after an explicit action by the user; at that point the provider receives the technical data needed for the connection. We do not make your data public or sell it.

External communications may take place through Airbnb, Booking.com, WhatsApp, Google Maps or OpenStreetMap. When you choose to access them, those providers process data under their own notices and privacy roles.

Availability, bookings and payments

This site uses Lodgify to check availability, prices and conditions. Searches send only the property, dates and number of guests and pets, without names or contact details. When you proceed to booking, we also send your first name, surname, email, optional phone number and language to manage your stay. The site keeps a technical booking reference to prevent duplicate submissions; this register does not contain names, email addresses or phone numbers in plain text. Payment takes place on the provider’s secure page: this site does not collect or store card details. The browser tab’s sessionStorage holds a technical verification code, valid for up to 24 hours, so you can resume checking the outcome after reloading. It contains no name, email address, phone number or card details.

Cookies and usage statistics

This site uses no profiling cookies and no advertising trackers. It usesGoogle Analytics 4 (Google Ireland Limited) to measure in aggregate form how the site is used, only if you consent to the “Analytics” category. The legal basis is your consent (art. 6.1.a GDPR and art. 122 Privacy Code), which you may withdraw at any time from the panel available in the footer, without affecting the lawfulness of processing already carried out.

Until you consent, no request reaches Google's servers and no analytics cookie is written. Google signals and ad personalisation are switched off: the data feeds neither profiling nor advertising. Cookie names, durations and purposes are listed in theCookie Policy.

Data transfer

Some processors may process data outside the European Economic Area. In such cases the transfer is covered by adequate safeguards under artt. 44 ff. GDPR (e.g. the European Commission's Standard Contractual Clauses).

In particular, data collected by Google Analytics may be transferred to the United States: Google LLC adheres to the EU–US Data Privacy Framework, found adequate by the European Commission, and the transfer is further covered by standard contractual clauses. This processing takes place only after your consent and stops if you withdraw it.

Retention period

Enquiries that do not lead to a relationship are reviewed and deleted within 12 months of the last contact, unless they must be kept longer to establish, exercise or defend a legal claim. If a contract is formed, relevant documents are retained for the applicable tax, civil-law and statutory periods (typically up to 10 years for accounting records). Security data follows the strictly necessary periods set by the provider and service configuration.

Data source and children

We collect data directly from you when you submit a form or contact us. The site and its commercial forms are intended for adults; if we receive a child's data without a valid reason, we delete it as soon as we become aware of it.

Your rights

You may exercise at any time the rights set out in artt. 15-22 GDPR (access, rectification, erasure, restriction, objection and portability) by writing to info@eleutheria.world. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You also have the right to lodge a complaint with theItalian data protection authority.

Changes

The controller may update this policy; the version in force is always published here.

Last updated: 14 September 2026.