Privacy Policy

Last updated: 22 June 2026

1. Who we are

This website is operated by:

LUSH PUGLIA STAYS – Ceglie
Boutique apartment in the historic centre of Ceglie Messapica, Puglia, Italy
CIN: IT074003C200126312
CIS Regione Puglia: BR07400391000077528

Data Controller: A.L.M. van Ginneken
Email: info@lushpugliastays.com
Address: Contrada Fantese 82, 72017, Ostuni (BR), Italia

For privacy-related questions, you can contact us by email.

2. Personal data we may collect

We may collect and process the following types of personal data:

• contact details, such as your name, email address, telephone number or WhatsApp contact;
• information you send to us by email, WhatsApp or other direct communication;
• booking and stay details, such as arrival and departure dates, number of guests and reservation information;
• information required for legal, administrative, tax or accommodation-registration purposes;
• technical website data, such as IP address, browser type, device information, pages visited and basic website usage data;
• information processed through third-party services used on our website, such as booking tools, website hosting, social media links, maps, analytics tools or communication services.

We do not intentionally collect sensitive personal data unless this is legally required or necessary for the management of your stay.

3. Why we use your personal data

We use personal data for the following purposes:

• to answer enquiries and communicate with guests;
• to manage availability requests, bookings and guest stays;
• to provide practical guest information before and during a stay;
• to comply with legal, fiscal, accommodation and public-security obligations;
• to manage our website and keep it secure;
• to understand how visitors use our website and improve its performance;
• to support marketing and communication activities, where consent is required and has been given;
• to handle complaints, disputes or legal claims where necessary.

4. Legal basis for processing

We process personal data only when we have a valid legal basis, including:

• Contractual necessity: to respond to booking requests, manage reservations and provide accommodation services.
• Legal obligation: to comply with applicable tax, accounting, accommodation-registration or public-authority requirements.
• Legitimate interest: to operate our website, communicate with guests, protect our property and improve our services.
• Consent: where required, for example for analytics cookies, marketing tools, Meta Pixel, embedded Google Maps or optional communications.

5. Bookings and third-party services

When you click a booking or availability link, you may be redirected to an external booking platform or service provider. These providers may process personal data according to their own privacy policies.

We may use third-party services for:

• website hosting and management;
• booking and availability management;
• email or WhatsApp communication;
• social media links;
• embedded maps or route information;
• analytics and website performance measurement;
• marketing and advertising measurement.

These third parties only receive personal data where necessary for the relevant service or where you have given consent when required.

6. Analytics, Meta Pixel and marketing tracking

Our website may use analytics and marketing tools, including Google Analytics and Meta Pixel, to understand website usage, measure performance and improve our communication and marketing activities.

These tools may process technical information and website interaction data, such as:

• pages visited;
• time spent on the website;
• device and browser information;
• approximate location;
• referral source;
• interaction with website buttons, booking links or contact options.

Where required by law, these tools are only activated after you have given consent through the cookie banner or cookie settings.

7. Embedded Google Maps

Our website may include embedded Google Maps or route information to help guests understand the apartment location and plan their arrival.

When Google Maps is loaded, Google may process technical and usage information such as your IP address, device information, browser information and map interaction data.

Where required, embedded Google Maps will only load after you have given consent for external content or related cookies.

8. Cookies and tracking technologies

Our website uses cookies and similar technologies. Some cookies are technically necessary for the website to work properly. Other cookies, such as analytics, marketing or tracking cookies, may require consent.

More detailed information is provided in our separate Cookie Policy.

9. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

In general:

• enquiry and contact data are kept only as long as needed to answer and manage the communication;
• booking and guest-stay data are kept for as long as necessary to manage the stay and comply with legal, tax or accounting obligations;
• data required by public authorities or accommodation regulations are retained according to applicable legal requirements;
• technical website data are kept for a limited period necessary for security, maintenance, analytics and performance measurement.

When data are no longer needed, they are deleted or anonymised where reasonably possible.

10. Sharing personal data

We do not sell personal data.

We may share personal data only when necessary with:

• booking or property-management service providers;
• payment or administrative service providers, where applicable;
• website, hosting, IT or communication service providers;
• analytics and marketing service providers, where consent is required and has been given;
• legal, accounting or professional advisers;
• public authorities where legally required.

11. International transfers

Some third-party services may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards required by applicable data protection law.

12. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.

However, no online service can be guaranteed to be completely secure.

13. Your rights

Under applicable data protection law, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• restrict or object to certain processing;
• request data portability, where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the competent data protection authority.

In Italy, the competent authority is the Garante per la protezione dei dati personali.

To exercise your rights, please contact us by email.

14. Links to other websites

Our website may contain links to external websites, booking platforms, social media pages, maps or third-party tools. We are not responsible for the privacy practices or content of those external websites.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date.

‍