01
Data Controller
Registered office: Viale Borsellino e Falcone 23, 70125 Bari (BA), Italy
Property: Contrada Santa Lucia s.n.c., 70043 Monopoli (BA), Italy
P.IVA 08998720729 · CIN IT072030B400122150
info@trullidamore.com · +39 349 567 6712
The Data Controller for personal data collected through the website trullidamore.com and associated communication channels (email, WhatsApp, contact forms) is Trullove srl, represented by its legal directors Antonella D'Amore and Anna D'Amore.
For any privacy-related matter or to exercise your rights under Art. 15-22 GDPR, please write to info@trullidamore.com.
02
Data collected
2.1 Navigation data
The systems and software procedures that support this website automatically acquire, during normal operations, certain personal data whose transmission is implicit in the use of internet communication protocols. These include: IP addresses, browser type, operating system, pages visited, access times, referral URLs. These data are used for anonymous statistics and to ensure the site functions correctly, and are not associated with identifying user data.
2.2 Data provided voluntarily by the user
We collect the following data when voluntarily provided:
| Channel | Data collected | |
|---|---|---|
| Website contact form | First name, surname, email, phone (optional), dates, number of guests, message text | |
| WhatsApp / Telefono | WhatsApp / Phone | Phone number, conversation content |
| Email address, data contained in the message | ||
| Airbnb / Booking.com | Airbnb / Booking.com | Data received from platforms at booking time (name, nationality, dates) |
| Instagram / Social | Instagram / Social | Username, content of direct messages |
2.3 Booking and stay data (legal obligations)
As a hospitality facility subject to applicable regulations, Trullove srl is required to collect and report to the competent authorities the personal details of guests (name, surname, date and place of birth, nationality, identity document) pursuant to Art. 109 T.U.L.P.S. and applicable regional regulations. These data are not used for any purpose other than legal compliance.
03
Purpose and legal basis
Personal data is processed for the following purposes, each with its own legal basis under Art. 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Managing booking enquiries and stays | Art. 6.1.b — contract performance |
| Reporting obligations to authorities (Alloggiati Web) | Art. 6.1.c — legal obligation |
| Responding to communications and enquiries | Art. 6.1.f — legitimate interest |
| Sending commercial communications (newsletter, offers) | Art. 6.1.a — explicit consent |
| Statistical website analysis (aggregate and anonymous data) | Art. 6.1.f — legitimate interest |
| Tax and accounting obligations | Art. 6.1.c — legal obligation |
Processing for direct marketing purposes is subject to the explicit consent of the data subject. Consent may be withdrawn at any time by writing to info@trullidamore.com without affecting the lawfulness of processing prior to withdrawal.
04
Data recipients
Personal data is not sold to third parties. It may be shared with the following categories of recipients, only to the extent strictly necessary:
- Public security authorities — mandatory communication of stay data pursuant to Art. 109 T.U.L.P.S. via the Alloggiati Web system.
- Booking platforms (Airbnb Inc., Booking.com B.V.) — to the extent provided by their respective terms of service for booking management.
- Technical service providers — website hosting, email services, analytics. These parties act as Data Processors under Art. 28 GDPR.
- Accountants and advisors — for tax and accounting obligations, bound by legal confidentiality requirements.
05
Retention period
| Data type | Retention period |
|---|---|
| Booking and stay data | 10 years (fiscal and legal obligations) |
| Communication data (email, WhatsApp) | 3 years from last contact |
| Contact form data | 24 months, unless converted to a booking |
| Navigation data (server logs) | 30 days, then aggregated anonymously |
| Marketing data (with consent) | Until consent is withdrawn |
| Identity document data (Alloggiati Web) | 5 years by law (D.P.R. 313/2002) |
Upon expiry of the retention periods, data is deleted or irreversibly anonymised. In the event of legal disputes, data may be retained until the final conclusion of the proceedings.
06
Cookies and tracking technologies
This website uses cookies and similar technologies. Cookies are small text files saved on the user's device to improve the browsing experience.
| Cookie | Type | Function | Duration | ||
|---|---|---|---|---|---|
tda-l |
tda-l |
Stores user's IT/EN language preference | Session / localStorage | ||
| Google Analytics | Google Analytics | Anonymous navigation statistics (if enabled) | 2 anni | ||
| Google Fonts (CDN) | Loading web fonts | No cookie set | |||
| WhatsApp Widget | WhatsApp Widget | External link, no data transmitted before click | N/A |
Users may manage, disable, or delete cookies through their browser settings. Disabling essential cookies may affect certain site functions. For third-party analytics cookies (Google Analytics), opt-out is available via the tools.google.com/dlpage/gaoptout plugin.
07
Cross-border data transfers
Some service providers used by Trullove srl are based or process data outside the European Economic Area (EEA). In these cases, transfers are carried out in compliance with Chapter V of the GDPR, based on:
- European Commission adequacy decisions (where applicable)
- Standard Contractual Clauses (SCC) approved by the European Commission
- Equivalent certifications and frameworks (e.g. EU-US Data Privacy Framework)
| Provider | Country | Safeguard | |||
|---|---|---|---|---|---|
| Airbnb Inc. | Airbnb Inc. | USA | USA | DPF / SCC | DPF / SCC |
| Booking.com B.V. | Booking.com B.V. | NL / USA | NL / USA | SCC | SCC |
| Google LLC | Google LLC | USA | USA | DPF / SCC | DPF / SCC |
| Meta Platforms (Instagram) | Meta Platforms (Instagram) | USA | USA | DPF / SCC | DPF / SCC |
| WhatsApp LLC | WhatsApp LLC | USA | USA | DPF / SCC | DPF / SCC |
08
Your rights
Under Arts. 15–22 GDPR, you have the right to:
Right of access (art. 15)
Obtain confirmation of whether your personal data is being processed and receive a copy.
Right to rectification (art. 16)
Obtain correction of inaccurate or incomplete data concerning you.
Right to erasure (art. 17)
Request erasure of your data when no longer necessary, unless legal obligations apply.
Right to restriction (art. 18)
Restrict processing of your data in specific circumstances provided for by law.
Right to data portability (art. 20)
Receive your data in a structured, machine-readable format.
Right to object (art. 21)
Object to processing based on legitimate interest or for direct marketing purposes.
Send a written request to info@trullidamore.com, stating your name, surname, and the specific request. We will respond within 30 days of receipt, as required by Art. 12 GDPR. If your request is refused or unaddressed, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
09
Minors
Trulli d'Amore services are intended for adults. We do not knowingly collect personal data from children under 16 years of age without parental or legal guardian consent. If such data is communicated to us, we will proceed to delete it promptly.
Children are welcome as guests at the property, in compliance with applicable regulations. Personal data of minor guests is processed exclusively for the statutory registration obligations required by law.
10
Changes to this privacy policy
Trullove srl reserves the right to amend this policy at any time, to reflect regulatory, technological or operational changes. Amendments are published on this page with the date of update. In the event of material changes affecting data subjects' rights, direct notification via email will be provided where possible.
Continued use of the website following the publication of changes implies acceptance of the updated privacy policy.
Current version: April 2026. Previous version: N/A (first publication).