Camelia Casa Vacanze
Privacy Policy
Last updated: September 30, 2026
Camelia Casa Vacanze ("we", "us", "our") is committed to protecting your privacy. This privacy policy explains what data is collected when you visit our website, how it is used, and what your rights are under the General Data Protection Regulation (GDPR).
What data do we collect?
Our website does not directly collect any personal data from you. We do not use contact forms or user accounts. We use Umami, a privacy-focused and cookieless web analytics platform, to understand aggregate website usage. However, the following third-party services used on our website may automatically collect limited technical data:
| Service | Data collected | Purpose |
|---|---|---|
| Hetzner (web hosting) | IP address, browser type, device info, access times | Serving the website (web server logs retained for 14 days) |
| Umami (web analytics) | Page URL, page title, referrer, browser, OS, device type, screen resolution, browser language, approximate location (country/region/city derived without storing IP) | Privacy-friendly, cookieless website traffic and usage analytics |
| CrowdSec (intrusion prevention) | IP address, request metadata, security event logs | Intrusion prevention, blocking malicious traffic, and security analysis |
| EasyDNS (DNS) | IP address, DNS query data | Domain name resolution (DNS) |
| OpenStreetMap | IP address, browser type, approximate country (via Geo-DNS) | Displaying the interactive map |
| Mailfence (ContactOffice Group SA) | Email address, email content, IP address, metadata (sender, recipient, date/time) | Hosting our email (contact@cameliacasa.com) |
Web analytics (Umami)
To understand how our website is used and improve visitor experience while strictly respecting your privacy, we use Umami, an open-source, privacy-first web analytics solution. Umami operates without cookies, does not collect any personally identifiable information (PII), and does not track users across websites. When you visit our website, Umami collects:
- Pageview & Interaction Data: URL pathname, query parameters/UTM campaign tags, page title, and referring website (HTTP referrer).
- Technical & Device Data: Browser name/version, operating system, device category (desktop, mobile, tablet), screen dimensions, and preferred browser language.
- Approximate Geolocation: Country, region/subdivision, and city (derived from your IP address via lookup headers/database; your actual IP address is never stored).
- Anonymous Session Hash: A temporary, non-reconstructible identifier generated from a hash of the IP address, User-Agent, website ID, and a monthly rotating salt to calculate unique visits without storing persistent identifiers or personal data.
All analytics data is collected exclusively for aggregate statistical reporting. For more information, visit the Umami website and review the Umami documentation.
Email communications
When you send us an email at contact@cameliacasa.com, your message is received and stored by Mailfence, a secure email service operated by ContactOffice Group SA, based in Belgium. Mailfence is GDPR-compliant and stores all data in Belgium under Belgian and EU privacy laws. Emails are protected with store-level encryption at rest and all connections are secured with SSL/TLS encryption. Mailfence does not scan, analyze, or share your emails with third parties for advertising or any other purpose. For more information, see the Mailfence privacy policy.
Server security and intrusion prevention (CrowdSec)
To protect our website and server against cyber threats, brute force attacks, vulnerability scans, and malicious activities, we use CrowdSec, an open-source intrusion prevention system. CrowdSec analyzes web server logs and incoming connection requests locally on our Hetzner server in Germany. If an IP address engages in abusive or malicious behavior, that IP address is temporarily blocked to protect server security and availability. In accordance with community defense mechanisms, security signals containing only the offending IP address, the triggered attack scenario, and timestamps may be shared with CrowdSec SAS (France, EU) to enrich global threat intelligence. Legitimate traffic and IP addresses from regular visitors are never shared with the community network. The processing and temporary collection of IP addresses for security defense is carried out on the basis of our legitimate interest (Article 6(1)(f) GDPR) in ensuring network and information security. For more details, consult the CrowdSec privacy policy.
How do we collect your data?
We do not collect data directly. The third-party services listed above automatically collect limited technical data when your browser loads content from their servers or executes privacy-preserving analytics scripts (Umami). This happens when you navigate our pages or view the map (OpenStreetMap tiles). Additionally, if you choose to email us, your email content and metadata are stored on Mailfence's servers in Belgium.
How is your data used?
The data collected by third-party services is used solely for the following purposes:
- Serving the website to your browser (web hosting on Hetzner)
- Analyzing aggregate website traffic and visitor trends in a privacy-preserving manner without cookies (Umami)
- Protecting the server against security threats and malicious traffic (CrowdSec)
- Domain name resolution (DNS via EasyDNS)
- Displaying the interactive map on the directions page (OpenStreetMap)
- Receiving and storing email communications you send to us (Mailfence)
We do not use your data for marketing, profiling, advertising, or any purpose other than providing and optimizing the services described above.
How is your data stored?
- Hetzner: The website is hosted on a Hetzner server located in Germany (EU). Web server logs (including IP addresses) are retained for 14 days for operational stability and security analysis. Hetzner complies with the GDPR. See the Hetzner privacy policy.
- Umami: Aggregated, anonymized analytics metrics. Raw IP addresses are not stored, and no cookies or persistent trackers are placed on your device. Umami is fully compliant with GDPR, CCPA, and PECR. See the Umami privacy policy.
- CrowdSec (CrowdSec SAS): Intrusion prevention software running on our Hetzner server in Germany. Offending IP addresses detected during malicious activities may be blocked locally and shared with CrowdSec's threat intelligence network in France (EU). See the CrowdSec privacy policy.
- EasyDNS: Provides DNS services for domain name resolution. EasyDNS complies with PIPEDA and GDPR. See their privacy policy.
- OpenStreetMap: Data is stored in the United Kingdom and the Netherlands. Tile cache servers are distributed globally. See the OSMF privacy policy.
- Mailfence (ContactOffice Group SA): Emails are stored in Belgium on servers operated by ContactOffice Group SA. Data is protected with store-level encryption at rest and SSL/TLS encryption in transit. Mailfence complies with Belgian privacy law and the GDPR. They do not share data with third parties for advertising. See the Mailfence privacy policy.
Cookies and Local Storage
Our website does not use tracking, advertising, or profiling cookies. Our analytics tool (Umami) is completely cookieless. We use your browser's local storage (localStorage) solely to remember your chosen language preference across pages and visits. Third-party services we use (such as OpenStreetMap) may set functional cookies necessary for their operation.
What are your data protection rights?
Under the GDPR, you have the following rights:
- The right of access – You have the right to request copies of your personal data.
- The right to rectification – You have the right to request that we correct any information you believe is inaccurate or incomplete.
- The right to erasure – You have the right to request that we erase your personal data.
- The right to restrict processing – You have the right to request that we restrict the processing of your personal data.
- The right to object to processing – You have the right to object to our processing of your personal data.
- The right to data portability – You have the right to request that we transfer the data we have collected to another organization, or directly to you.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Privacy policies of other websites
Our website contains links to other websites (OpenStreetMap, Google Maps, Apple Maps). Our privacy policy applies only to our website. If you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
We keep our privacy policy under regular review and place any updates on this page. This privacy policy was last updated on September 30, 2026.
How to contact us
If you have any questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email: contact@cameliacasa.com
Camelia Casa Vacanze
Via Carlo Alberto 36
10010 Palazzo Canavese (TO)
Italy
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.