Legal Notice

Website owner
C.A.V. Caselsa, operated by Mr. Roberto Borghini
Registered office: via della Casetta 1, 53037 San Gimignano (SI), Italy
VAT number (P.IVA): 00820230522
Tax code (C.F.): BRGRRT39C22D612Y
Email: villacaselsa@gmail.com
Phone: [number]

Tourist accommodation registration
Regional code (CIR): [number]
National identification code (CIN): [number]

Hosting provider
This website is hosted by Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA.

Intellectual property
All text, photographs, videos, graphics and logos on this website belong to C.A.V. Caselsa or are used with permission. They may not be copied, reproduced or distributed, in whole or in part, without written consent.

Limitation of liability
The information on this website is provided for general purposes. We make every effort to keep it accurate and up to date, but we accept no liability for errors or omissions. We are not responsible for the content of external websites linked from this site.

Governing law
This website and any agreement entered into through it are governed by Italian law. For disputes involving consumers, the court with jurisdiction is the one where the consumer resides, where the law requires it.

Privacy Policy

Last updated: 06.11.2026

This policy explains how C.A.V. Caselsa, operated by Mr. Roberto Borghini ("we", "us"), collects and uses personal data when you visit caselsa.com, send us a booking request, or enter into a contract with us. It is provided under Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

1. Data controller
The controller is Mr. Roberto Borghini, operating as C.A.V. Caselsa, via della Casetta 1, 53037 San Gimignano (SI), Italy. You can contact us at villacaselsa@gmail.com.

2. Data we collect

  • Enquiries and booking requests made online: name, email address, phone number, requested dates, number of guests and any message you send.

  • Contract and payment data: collected offline, when a contract is prepared and signed. This includes the identity and billing details needed for the contract and invoice, and payment information for the methods agreed in the contract. The contract is a separate written agreement and is not processed through this website.

  • Guest registration: identification data required by Italian law for tourist accommodation (see section 4).

  • Website usage data: information collected through cookies and similar technologies (see the Cookie Policy).

3. Purposes and legal bases

PurposeLegal basisAnswering enquiries and handling booking requestsSteps prior to a contract (Art. 6(1)(b) GDPR)Preparing, signing and managing the stay contractPerformance of a contract (Art. 6(1)(b) GDPR)Registering guests with the local police authorityLegal obligation (Art. 6(1)(c) GDPR), under Art. 109 of the Italian Public Security Law (TULPS)Issuing invoices and keeping accounting recordsLegal obligation (Art. 6(1)(c) GDPR)Website analytics (if active)Your consent (Art. 6(1)(a) GDPR)Sending newsletters or promotional offers (if active)Your consent (Art. 6(1)(a) GDPR)

4. Guest registration
Under Italian law, we must register the identity of every guest and report it to the local police (Questura) within the required time. This applies to all guests, whether the stay was arranged online or otherwise.

5. Who we share data with
We do not sell your personal data. We share it only where necessary with:

  • Squarespace, Inc., as our website hosting and service provider;

  • our accountant and tax advisors, for accounting obligations;

  • public authorities, where required by law, including the Questura for guest registration.

6. Transfers outside the EU
Squarespace, Inc. is based in the United States. Transfers of personal data are protected by the EU-U.S. Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission.

7. Retention
We keep data only as long as necessary for the purposes described above:

  • booking requests that do not lead to a contract: [12 months];

  • contract, invoicing and payment data: for the period required by tax and accounting law (generally 10 years);

  • guest registration data: for the period required by public security regulations;

  • analytics data: according to the settings of the analytics tool.

8. Your rights
Under the GDPR you have the right to:

  • access your personal data;

  • request correction or deletion;

  • restrict or object to processing;

  • receive your data in a portable format;

  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to villacaselsa@gmail.com. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.

Cookie Policy

Our website uses the following types of cookies:

  • Essential cookies: needed for the site to work, such as security and basic functions. These do not require consent.

  • Analytics cookies: [e.g., Google Analytics, if used]. These are set only with your consent.

  • Third-party embedded content: Google Maps and Instagram may set their own cookies when you interact with their content.

You can accept or reject non-essential cookies using the banner shown on your first visit. You can change your choice at any time through [cookie settings link], or through your browser settings.