Lakeview Cannobio Camping & Resort
lakeview-cannobio-lake-maggiore

Privacy Policy

How we handle your data.

Contents

  1. 1. Controller
  2. 2. Principles
  3. 3. Hosting, Delivery, and Security
  4. 4. Cookies and Consent
  5. 5. Reach Measurement with Plausible Analytics
  6. 6. Booking Inquiries and Bookings
  7. 7. Payment
  8. 8. Contact via Email, Telephone, and Form
  9. 9. WhatsApp
  10. 10. Newsletter
  11. 11. Google Maps
  12. 12. Links to Social Networks
  13. 13. Your Rights
  14. 14. Obligation to Provide Data, Changes

1. Controller

Lakeview Cannobio SRL

Registered office: Via Umberto I 2/b, 28822 Cannobio (VB), Italy

Operating site (Campsite): Strada Nazionale 3, 28822 Cannobio / Italy

Telephone: +39 0323 739647 · Email: [email protected]

Managing Directors: Marica Bergamaschi, Wolfgang Kintzel

VAT ID / Tax code: 02698370034

Please note: The campsite is located at Strada Nazionale 3, 28822 Cannobio / Italy. Via Umberto I 2/b is only the legal registered office of the company.

We have not appointed a data protection officer because there is no legal requirement to do so. For any questions regarding data protection, you can reach us using the contact details provided above.

2. Principles

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Italian Data Protection Act (D.Lgs. 196/2003, Codice in materia di protezione dei dati personali). We only collect the data we need for the respective purpose. We do not sell data, do not display advertisements, and do not create user profiles.

3. Hosting, Delivery, and Security

Hosting

Our website is hosted by SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain. SiteGround processes the data on our behalf (Art. 28 GDPR).

Server Log Files

Every time the site is accessed, the server automatically stores technical data: IP address, date and time, page accessed, previously visited page (referrer), browser, and operating system. This serves to ensure secure and stable operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website). The log files are automatically deleted after a short period.

Cloudflare

For faster loading times and protection against attacks, we use the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your requests are routed through Cloudflare servers; primarily, the IP address and technical connection data are processed. The legal basis is Art. 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; an adequacy decision by the EU Commission therefore applies to transfers to the USA (Art. 45 GDPR).

Protection Against Attacks

To protect against attacks, we use a security plugin (Wordfence) that checks access to our server based on the IP address. The legal basis is Art. 6(1)(f) GDPR.

Encryption

All data is transmitted in encrypted form (SSL/TLS, recognizable by "https" in the address bar).

4. Cookies and Consent

We use very few cookies. We set technically necessary cookies, for example for the booking system or to save your cookie selection, on the basis of Art. 6(1)(f) GDPR.

We only load all other services once you have given your consent (Art. 6(1)(a) GDPR). We manage your consent with the Complianz plugin; it stores your selection in cookies (cmplz_…) for 365 days. You can change or revoke your consent at any time via the "Cookie Settings" at the bottom of every page.

5. Reach Measurement with Plausible Analytics

To understand how our website is used, we use Plausible Analytics from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible does not set cookies, does not create user profiles, and does not store IP addresses; a daily changing anonymous value prevents visitors from being recognized over several days. The data is processed in the EU. We only see aggregated figures, such as page views, referral pages, countries, and device types. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in data-minimizing reach measurement).

6. Booking Inquiries and Bookings

When you make an inquiry or book via our booking mask, we process the information from the form: name, address, email address, telephone number, travel period, accommodation, number of people, details about vehicles or pets, and your message. We need this data to process your booking. The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual measures). The booking system (VikBooking) runs on our own server.

Booking Portals

We synchronize our availability with booking portals via a channel manager from E4J S.r.l., Via delle Cantine 27, 50041 Calenzano (FI), Italy. If you book via a portal such as Booking.com, we receive your booking data from there; the portal's own privacy policy applies to the processing by the portal.

Legal Obligations in Italy

  • Guest registration: As an accommodation provider, we must record the personal details of all guests upon arrival and report them to the police authorities (Art. 109 TULPS, "Alloggiati Web" portal). This includes the information from your identity document. The legal basis is Art. 6(1)(c) GDPR.
  • Tourism statistics: For official statistics, we transmit aggregated information (arrivals, overnight stays, origin) to the Piedmont Region (Ross1000 / Piemonte Dati Turismo).
  • Tourist tax: For the billing of the tourist tax (imposta di soggiorno) to the Municipality of Cannobio, we process the necessary information, such as the number and age of guests and the duration of the stay.

Storage duration

We retain booking and invoice data for as long as required by tax and commercial law periods, which in Italy is generally 10 years (Art. 2220 Codice Civile). After that, we delete it.

7. Payment

For online payments, we work with these payment service providers:

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
  • Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland

We only pass on the data to the respective provider that they need for the payment, such as the amount, name, email address, and booking number. You enter your card or account details directly with the payment service provider; we do not receive them. The legal basis is Art. 6(1)(b) GDPR. Both providers are independent controllers and may also transfer data to the USA; the basis for this is the EU-US Data Privacy Framework or standard contractual clauses.

8. Contact via Email, Telephone, and Form

When you contact us by email or telephone, we process your details to answer your inquiry. We use forms for our waiting list and guest surveys; your details are stored on our server and transmitted to us by email.

The legal basis is Art. 6(1)(b) GDPR if it concerns a booking, otherwise Art. 6(1)(f) GDPR; for voluntary information, such as in the survey, Art. 6(1)(a) GDPR. We delete the data once the inquiry has been resolved and there are no retention obligations.

9. WhatsApp

On our website, we link to WhatsApp. WhatsApp only opens when you click the WhatsApp button; no data is transferred to WhatsApp before then. If you write to us via WhatsApp, WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, processes your message and telephone number. Parts of the data may go to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework.

We manage our WhatsApp Business messages via ZERNIO SOFTWARE SL, Carrer Mallorca 2A, 17230 Palamós (Girona), Spain, which acts as a processor for us (Art. 28 GDPR). An automated assistant may initially respond to inquiries. The legal basis is Art. 6(1)(b) or (f) GDPR. You can also reach us at any time by email or telephone.

10. Newsletter

As our guest, you will occasionally (about twice a year) receive information about our own offers by email. For this purpose, we use the email address you provided when booking. The legal basis is Art. 6(1)(f) GDPR in conjunction with Art. 130(4) of the Italian Data Protection Act (Codice in materia di protezione dei dati personali).

You can object to this at any time without incurring any costs other than the standard transmission costs: via the unsubscribe link in every newsletter or by email to [email protected]. We send the newsletter ourselves using the Mailster plugin, which runs on our server; the addresses remain with us, and no external shipping service provider is involved.

11. Google Maps

On some pages, we embed maps from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you have given your consent (Art. 6(1)(a) GDPR). In the process, your browser transmits your IP address to Google, among other things; transmission to the USA is possible. Google is certified under the EU-US Data Privacy Framework.

12. Links to Social Networks

On our website, we link to our profiles on Facebook, Instagram, YouTube, TikTok, Pinterest, and LinkedIn. These are simple links, not plugins: data is only transferred when you click a link and access the page of the respective network. Their own privacy policy applies there.

13. Your Rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). You can revoke any consent given at any time for the future (Art. 7(3) GDPR). To do so, simply contact [email protected].

Right to object (Art. 21 GDPR): If we process data on the basis of our legitimate interest, you can object at any time for reasons arising from your particular situation. You can object to the use of your data for direct marketing at any time without giving reasons.

Right to lodge a complaint: You can complain to a data protection supervisory authority. The authority responsible for us is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it. You can also contact the supervisory authority at your place of residence.

14. Obligation to Provide Data, Changes

We need certain data for bookings; without it, we cannot conclude a contract. The information for guest registration is required by law. All other information is voluntary. We do not make automated decisions within the meaning of Art. 22 GDPR.

We adapt this privacy policy if our services or the legal situation change.

Last updated: November 2026