How we handle your data
Elisabetta Paganoni | Mary House Valtellina
Via Giuseppe Mazzini 4, 23100 Sondrio (SO), Italy
Mail: Betpaganoni2018@gmail.com | WhatsApp: +39 345 103 9764
Booking: first name, last name, email, phone, dates of stay, number of guests and any requests entered in the booking form.
Payment: card payments are handled by Stripe; we do not see or store card details. For bank transfers we receive the details included in the transfer.
Check-in: by Italian law (art. 109 TULPS) we register an ID document for every guest and send the data to the police through the Alloggiati Web portal; we also report anonymous statistics and the data needed for the tourist tax.
Contact: the messages you send us via WhatsApp or email. If you use the enquiry form on the website we collect your name, email, phone (optional), house, dates, number of guests, message and page language: the enquiry reaches our email inbox and you automatically receive a confirmation email with a summary.
To manage your booking and stay (performance of the contract), to comply with legal obligations (guest registration, tax, tourist tax) and to answer your requests for information and quotes (pre-contractual steps). Legal bases: Art. 6(1)(b) GDPR (contract and pre-contractual steps) and Art. 6(1)(c) GDPR (legal obligations). We do not use your data for advertising, we do not sell it and we do not carry out profiling.
If you tick the box when booking, we also use your email to send you our offers (consent, Art. 6(1)(a) GDPR): only a few emails, and you can withdraw consent at any time by replying or writing to us. We keep the email for offers until you withdraw consent.
Smoobu GmbH (Germany, booking and message management), Stripe (payments), Booking.com and other booking sites if you book through them, Netlify (website hosting and storage of enquiry-form messages and offer sign-ups), Google (Gmail and Google Apps Script, to receive enquiry-form messages and send you the confirmation email), WhatsApp/Meta if you choose to contact us there. Netlify, Google, Stripe and Meta may process data in the United States: transfers are based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission (Art. 45 and 46 GDPR).
Booking and accounting data for 10 years, as required by tax law; check-in data only for the period required by law; messages and enquiry-form requests for as long as needed to handle them and in any case no longer than 24 months, unless they lead to a booking.
You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to the contacts above. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
This website does not use profiling cookies or any analytics or advertising tools. The Smoobu booking form, Stripe payments (fraud prevention) and the OpenStreetMap maps may use technical cookies required for them to work. The website fonts and images are hosted on our own server. No consent is required for these uses. You can block or delete cookies in your browser settings at any time.
Last updated: 2 October 2026
No booking-site fees. For any question message us on WhatsApp, we reply quickly.