Privacy Policy
Last updated 29 September 2026
Your privacy is part of our hospitality. This policy explains what data we collect, why, and how we protect it, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controllers
Casa Vermouth. Via Cesare Battisti 9, Turin, Italy. Email: stay@casavermouth.com.
2. What data we process
- Booking data: name, email, phone number, dates of stay, number of guests, special requests.
- Payment data: payments are processed by Stripe. We never see or store your full card details.
- Identity documents: personal and document details of each guest, collected through online check-in.
- Communications: the messages you send us by email or WhatsApp.
- Browsing data: technical data needed for the website to work (for example IP address and browser type).
If you book on behalf of another guest, please share this policy with them.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Managing your booking, stay and requested services | Performance of a contract |
| Registering guests with the police (Alloggiati Web) and handling the tourist tax | Legal obligation |
| Accounting and tax obligations | Legal obligation |
| Protecting our rights in case of disputes or damage | Legitimate interest |
| Sending you our newsletter | Consent, which you may withdraw at any time |
Providing your booking data and identity documents is necessary: without them we cannot confirm your booking or welcome you. We do not use your data for profiling, we never sell it, and we do not make decisions based solely on automated processing.
4. Who we share it with
Only with those who help us host you, all bound by confidentiality:
- Lodgify (booking system) and Netlify (website hosting);
- Stripe (payments);
- our online check-in provider;
- WhatsApp (Meta), when you choose to contact us through this channel;
- Neh Hospitality, who support us on site with welcoming guests and caring for the house;
- our accounting, tax and legal advisers;
- the Turin police headquarters (Questura), the City of Turin and other authorities, for legal obligations.
Some of these providers may process data outside the European Union. In such cases, transfers are covered by the safeguards required by the GDPR, such as adequacy decisions or standard contractual clauses.
5. How long we keep it
- Booking and accounting data are kept for 10 years, as required by tax law.
- Identity document details are transmitted to the police as required by law. We do not keep copies of documents longer than strictly necessary.
- Newsletter data are kept until you withdraw your consent.
- Messages are kept for as long as needed to manage your stay and any follow-up requests.
6. How we protect it
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse, and we rely on providers offering similar guarantees.
7. Your rights
You may at any time ask to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format, and you may withdraw any consent you have given at any time, by writing to stay@casavermouth.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU country where you live.
8. Cookies
This website uses only technical cookies needed for it to work and for booking and payment, including those of our booking and payment providers. If we add analytics or marketing tools in the future, we will ask for your consent through a dedicated banner.
9. Changes
We may update this policy from time to time; the current version is always published on this page, with the date of the last update.