Privacy Policy
Last updated: July 2026
This notice explains how personal data of visitors to this website and guests booking a stay at Botanical Apartment Modena are processed, pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
Riccardo Mingarelli — Botanical Apartment Modena
Via dei Tintori 9, 41121 Modena (MO), Italy
VAT 04247060363 · CIN IT036023B4INOOYGNN
Email: riccardomingarelli33@hotmail.it · Phone: +39 329 818 4895
2. What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| First name, surname, email | Managing your booking and communicating with you | Performance of a contract (Art. 6.1.b) | 10 years (tax obligations) |
| Stay dates and number of guests | Checking availability and calculating the price | Performance of a contract | 10 years |
| Vehicle number plate | Requesting the ZTL pass from the Municipality of Modena for your stay | Performance of a contract | Deleted within 30 days of check-out |
| Payment data | Collecting payment | Performance of a contract | Processed solely by Stripe — we never see or store it |
| Identity documents | Mandatory reporting to the Italian Police (Alloggiati Web) and ISTAT | Legal obligation (Art. 6.1.c) — Art. 109 TULPS | Collected via Chekin, per statutory terms |
No tracking. This website uses no Google Analytics, no advertising pixels, no external fonts and no profiling tools. We do not track your browsing and we do not share data with advertisers.
3. Provision of data
Providing your first name, surname and email is necessary to complete the booking: without them the contract cannot be concluded. The number plate is required only if you choose to arrive by car and wish to use the included ZTL pass. Providing identity document data is required by Italian law and cannot be waived.
4. Who we share data with
Your data is processed by selected providers acting as data processors under Art. 28 GDPR:
- Netlify (website hosting and booking storage) — privacy policy
- Stripe (payment processing, PCI-DSS Level 1 certified) — privacy policy
- Resend (transactional email delivery) — privacy policy
- Chekin (online check-in, identity verification, tourist tax)
- Modena Police Headquarters via Alloggiati Web and ISTAT — reporting required by law
- Municipality of Modena — number plate only, for issuing the ZTL pass
Data is never sold or transferred to third parties for commercial purposes.
5. Transfers outside the EU
Some providers (Netlify, Stripe, Resend) are based in the United States. Transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework.
6. Your rights
Under Articles 15-22 GDPR you may at any time request access to your data, rectification, erasure, restriction of processing, portability and objection. To exercise them write to riccardomingarelli33@hotmail.it: you will receive a reply within 30 days.
Some data cannot be erased before statutory deadlines (e.g. invoices: 10 years; police reporting). You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
7. Security
The site uses encrypted HTTPS on every page. Booking data is stored on protected infrastructure accessible only to the controller. Card data never passes through our systems: it is handled directly by Stripe.
8. Changes
Any updates to this notice will be published on this page with a new update date.