Privacy policy

This notice explains how we process the personal data of people who use the Caorle.com portal, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003). We have tried to write it simply: if anything is unclear, write to us.

Who is the data controller

Alfa.it srl Unipersonale
Via Sile 9, 30021 Caorle (VE), Italy
VAT no. and tax code 04563480278
Email: privacy@alfa.it

What data we process

Browsing data

Like every website, the server automatically records some technical information about each visit: IP address, date and time, page requested, type of browser. It is needed for the site to work and stay secure and is not used to identify you.

Data you send us through the forms

When you ask a property for a quote, or several properties at once for availability, you give us: first name and surname, email address and, if you wish, phone number and home town; the dates of your stay, the number of adults and children and their ages, the board option and the notes you write. In the notes field we ask you not to include health information or other special categories of data: they are not needed for a quote.

Search text

The text you write in the search bar, or in the search for properties to write to, is processed by an artificial intelligence system. You will find all the details in the Artificial intelligence section.

Cookies and browser storage

We use technical cookies and, only with your consent, Google Maps. All the details are in the cookie policy.

Copy of the requests sent

For every request sent we keep a copy with the form data: first name, last name, email, phone and city, dates of stay, adults and children with their ages, board, notes, language and the properties you sent it to. We use it to check that the request reached the properties, to help you if you get no reply, and for anonymous statistics on requests, for example the most requested periods. Only the people authorised to manage the site can see it.

Rating of the portal and outcome of your request

When you send a request, we keep your first name, last name, email, language and the properties you sent it to. We need them for two things: to ask you, right after sending, for a rating from 1 to 5 of the portal, with an optional suggestion; and, for accommodation requests only, to write to you once about 15 days later to ask whether you found accommodation through Caorle.com and, if you wish, at which property. Answering is optional. Your answers help us improve the service and count, without your data, how many bookings the portal has brought to each property. About 7 days after the end of your stay we write to you once to ask, if you stayed at one of the properties you contacted, for a review, a rating from 1 to 5 and an optional comment: the review is not published, only that property sees it, without your name or email.

Statistics on featured properties

For featured properties we count how many times they have been viewed and opened. We only store a daily total for each property: no IP address, no data about you.

Why we process data and on what legal basis

• To forward your request to the properties you choose, so that they can reply: this is something you do yourself, before any contract with the property (Art. 6.1.b GDPR).
• To keep a copy of the requests sent, to check that they arrived, help you if you get no reply and draw anonymous statistics from them: our legitimate interest in offering a reliable service (Art. 6.1.f).
• To run the site and protect it, for example by limiting the number of requests sent in a short time and blocking automated messages: our legitimate interest (Art. 6.1.f).
• To ask you to rate the portal and whether you found accommodation, with a single email about 15 days after the request and one more about 7 days after your stay for a private review of the property: our legitimate interest in improving the service (Art. 6.1.f). Answering is optional.
• To answer your searches, including with artificial intelligence: our legitimate interest in offering a useful search service, balanced by the measures described below (Art. 6.1.f).
• To show you Google Maps: only with your consent (Art. 6.1.a), which you can withdraw at any time.
• To comply with legal obligations or requests from the authorities (Art. 6.1.c).

We do not use your data for advertising, we do not sell it and we do not create profiles.

Who we share data with

• The properties you write to. They receive the form data by email and reply to you directly at the address you gave. Once they receive it, they are independent controllers: for that data, please contact them. If you leave a review, the property you named receives its rating and comment, without your name or email.
• Technical providers processing data on our behalf as processors (Art. 28 GDPR): Serverplan S.r.l. (Italy), which hosts the site, and Qboxmail S.r.l. (Italy), which manages the email and the sending of emails, including requests to the properties.
• TypeSafe AI, Inc. (United States), for the artificial intelligence search: it receives only the search text, with no personal data, as explained below.
• Google, only if you consent to the maps: it receives your IP address when you load Google Maps.
• Public authorities, when the law requires it.

Artificial intelligence

Some of the site’s search functions use an artificial intelligence system: we tell you here for transparency, as required by the European Artificial Intelligence Regulation (EU Reg. 2024/1689).

Where we use it

• The “What are you looking for in Caorle?” search bar, at the top of every page and on the results page.
• The search for properties on the “One request to several properties” page.
• The “Not sure where to start?” game on the home page, which uses your answers to build a search phrase.

How it works

Our server sends the text of your search, together with the public descriptions of the site’s properties and pages, to the Jev language model by TypeSafe AI, Inc. The model assesses which ones match the request and we show you the list. The artificial intelligence does not write texts published on the site and does not make decisions for you: it suggests results, which you can check and correct, for example by removing a filter. If the service does not respond, the search works by keywords on our server, without artificial intelligence.

What data the provider receives

No personal data. The provider receives only the search text, for example “hotel with a pool near the centre”, and the public descriptions of the site. The request is sent from our server, not from your browser: the provider does not receive your IP address, cookies or any other data that could identify you, and the search text is not linked to you in any way. You do not need personal data to find a property, so please do not include any in your search, such as names, phone numbers or health information.

TypeSafe AI states that it does not use the texts it receives to train or improve its models. The service is hosted in the United States: see the section on transfers outside the European Union.

What we keep

We do not keep the text of searches. To avoid repeating the same processing, we keep only the model’s assessments for one day, linked to an encrypted fingerprint of the phrase from which the text cannot be recovered. Technical error logs may contain the address of the results page, which includes the search.

No automated decisions

The results are search suggestions: they have no legal effects and do not significantly affect you (Art. 22 GDPR). You can always browse the lists and use the filters without using the search. Like any system of this kind, artificial intelligence can make mistakes: before writing to a property, check the amenities on its page.

Transfers outside the European Union

• TypeSafe AI, Inc., United States: it receives only the search text, without personal data, so we do not transfer personal data to it. The relationship is nevertheless governed by TypeSafe’s Data Processing Addendum, which includes the standard contractual clauses approved by the European Commission (Art. 46 GDPR).
• Google, United States, only if you consent to the maps: Google LLC participates in the EU-US Data Privacy Framework, recognised as adequate by the European Commission.

How long we keep data

• Requests and quotes: the site uses them to compose the emails to the properties and keeps a copy with the form data and the properties contacted, together with any rating and your answer to the accommodation question. After 12 months first name, last name, email, phone, city, children's ages and notes are deleted: only the dates of stay, number of guests, board, properties, ratings and answers remain, anonymously. The properties keep the data according to their own privacy notices.
• Browsing session: up to 24 hours of inactivity.
• Server browsing data: up to about 2 months (the current month and the previous one), after which they are deleted automatically, unless needed to investigate crimes.
• Cookie choice: 6 months, after which we ask you again.

How we protect data

The site uses an encrypted connection (HTTPS). The forms are protected against submissions from other sites and against automated messages, and the number of submissions is limited. Access to the site’s administration is restricted to authorised people.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest (Articles 15-21 GDPR). You can withdraw your consent to the maps from Cookie preferences, also in the footer of every page, without affecting processing already carried out.

Write to privacy@alfa.it: we reply within one month. For data already sent to a property, you can also contact the property directly.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Minors

The request forms are not intended for people under 14. If you are younger, ask a parent to send the request for you.

Changes to this notice

We may update this notice, for example when we add a service. The date of the last update is at the top of the page. If the changes concern cookies, we will ask for your consent again.