Privacy notice

Who is responsible. S O'Sullivan, who lets the apartment "incanto" in Lucca as a private individual. Contact: incantolucca@gmail.com.

What we collect and why. When you send a booking request we receive your name, email address, phone number (if you give it), the dates and number of guests, and your message. We use them only to answer your request and, if you stay, to arrange your stay. We need your name, email address, dates and number of guests in order to reply; the phone number and message are optional. The legal basis is taking steps at your request before a contract (GDPR art. 6(1)(b)).

At your stay. Italian law requires us to register guests' identity documents with the police (Polizia di Stato) and to report stays to the regional tourism statistics office and the Comune di Lucca for the tourist tax. This is done at arrival, not through this website (legal obligation, art. 6(1)(c)), and we cannot host guests without these details. We do not keep a copy of your identity document once your details have been sent to the police.

Who else handles the data. The request form is processed by our website host, Netlify, Inc., and delivered to our email account with Google. Both companies are based in the United States, so your data may be transferred there; these transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. Our host also records technical data such as IP addresses to deliver this website and keep it secure. We do not sell or share your data for marketing, and this website sets no tracking or advertising cookies.

How long we keep it. Requests that do not lead to a stay are deleted within 12 months. Receipts for the police registration are kept for 5 years, as Italian rules require. Other records of stays are kept for as long as Italian tax rules require.

Your rights. You can ask to see, correct, delete or restrict your data, receive a copy in a portable format, or object to its use, by emailing us. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali.

Last updated: 10 November 2026.