Privacy and data processing

Data controller

Data connected with this site is processed by the management of the Il Borgo guest houses, at Via Buonconsiglio 30, 86070 Scapoli (IS), Italy.

The controller’s full identifying details — legal name and tax or VAT number — are being verified and will be published here as soon as they are available: they are public-register information, and writing them from guesswork would mean assigning to someone a responsibility that may not be theirs. In the meantime the contact details below are live, and they are the ones we answer.

Address

Via Buonconsiglio 30, 86070 Scapoli (IS)

Phone

+39 340 868 8146

Email

info@ilborgoscapoli.com

What data this site processes

Two categories, and no others. Technical browsing data, which the provider serving the pages records for operation and security. And the data you choose to send us, if you write or call.

The site has no forms, accounts, carts or booking systems: there is no place to type something in and press send, and no archive it would end up in.

Technical browsing data

As with any website, whoever serves the pages records connection data: IP address, date and time of the request, page requested, browser and operating system type, and the referring page if there is one. It is needed to deliver the page and to protect the site from abuse.

That data stays with the provider: this site is made of static pages, has no database of its own and receives no copy of those logs.

Data you send us

If you call, write on WhatsApp or send an email, we process what you tell us — name, contact details, the content of the message — in order to reply and to arrange a stay if there is one.

None of this passes through the site, which has no sending or storage system at all. The WhatsApp button opens the app already installed on your device with a message written for you, which you remain free to edit or not to send: until you press send in your own app, nothing has reached us.

Purposes and legal basis

Technical browsing data is processed to deliver the site and keep it secure: the legal basis is legitimate interest, Article 6(1)(f) of Regulation (EU) 2016/679.

The data you send us is processed to answer your enquiry and, if you decide to stay, to arrange it: the legal basis is the performance of pre-contractual and contractual measures taken at your request, Article 6(1)(b).

How the data is handled

Pages travel encrypted: the site is reachable over HTTPS only, and anyone arriving at an unencrypted address is sent to the encrypted one. The messages you send stay on the guest houses’ devices and mailboxes, and are read by the people who look after guests.

There is no automated decision-making and no profiling: the site does not recognise you, does not tell a first visit from a second, and builds no profile.

For how long

Technical logs are kept by the provider serving the pages, for the periods set out in its own notice: we do not set them, and we do not quote them here rather than state a retention period we cannot guarantee.

The messages you send stay for as long as it takes to reply and, if a stay follows, for the period required by the legal obligations attached to hospitality.

Who serves these pages

The site is hosted on the Cloudflare, Inc. network, which acts as a processor for the technical data described above. It is the only external provider involved in running these pages: there are no analytics, advertising, chat or lead-capture services.

Cloudflare is a United States company, so a transfer of data outside the European Economic Area is possible. It takes place on the basis of the safeguards set out in Chapter V of the Regulation, described in the provider’s own notice.

Cookies and browser storage

The site sets no cookies: no technical ones, no third-party ones, no profiling ones. It does not use browser storage, saves no preferences and leaves no identifiers of any kind. This was checked on the published site, not inferred from the code.

That is why no consent banner appears: showing one where there is nothing to consent to would be misleading. The typefaces are hosted on the site itself, so not even displaying them involves a request to an outside server.

Choosing a language

The site is available in five languages and each has its own address: you choose a language by following a link, not by setting a cookie or saving a preference. Nothing is stored to remember which language you read in.

Links to outside services

The booking buttons lead to the pages of the five guest houses on Booking.com; other links lead to Google Maps, the property’s Facebook page, the Instagram profile of the person who built the site, WhatsApp, and the official sites cited on the page about the area.

They are links, not embedded content: until you follow one, your browser contacts none of those services and none of them knows you are here. Once you leave this site their own notices apply, and we have no control over them.

Bookings

Bookings are completed on Booking.com, which acts as an independent controller for the data collected on its own pages. This site does not receive, store or have any way of consulting that data.

Your rights

You may exercise at any time the rights set out in Articles 15–22 of Regulation (EU) 2016/679: access to your data, rectification, erasure, restriction of processing, objection and portability.

To exercise them, write to the email address at the top of this page or call the property: no particular form is needed, it is enough to explain what you are asking for.

If you believe the processing of your data breaches the Regulation, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority.

Updates to this notice

This notice describes the site as it is today. If forms, analytics tools or third-party content were ever added, it would have to be updated before they went live, together with any collection of consent.

Last updated: 7 September 2026