Legal
Privacy policy
Last updated: 9 October 2026
This page explains how Il Belpoggio Su Todi handles the personal data you leave on www.belpoggiotodi.com when you ask for information or a quote for your stay. Cookies and the information stored in your browser are covered by the cookie policy.
Data controller
Il Belpoggio Su Todi di Federico D'Onghia, Vocabolo Castello di Canonica 2, 06059 Todi (PG), Italy, VAT no. IT04037800549. For any question about your data, write to welcome@ilbelpoggiosutodi.it.
What data we collect
Through the enquiry form we collect your name, email, the reason for your enquiry, the country you are writing from, the number of guests and your message.
While you browse, the site records without cookies the page visited, where you came from, your country and your type of device. Your IP address is not stored.
Why we use it
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a proposal for your stay | Pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| Protecting the site and the form from spam and abuse | Legitimate interest of the controller (art. 6.1.f GDPR) |
| Counting visits and understanding which pages work | Legitimate interest of the controller, with data that does not identify you |
We need your name and email to reply: without them we cannot get back to you. The other fields help us prepare a suitable proposal. If you book, the data about your stay and the details the law requires from guests are handled separately, with the information you receive when you book.
How spam is filtered
When you send the form, Cloudflare Turnstile checks that a person is writing. An artificial intelligence system then reads the text to recognise spam (TypeSafe, with OpenRouter as a fallback). The system separates genuine enquiries from unwanted advertising and makes no decisions about you.
After sending, you receive an email confirming that your enquiry has arrived.
How long we keep it
Enquiries stay in the site's archive for as long as needed to answer you and organise your stay, and in any case no longer than the service through which Deep Marketing Srl runs the site. You can ask us to delete them sooner.
Who sees the data
The data is seen by the controller and the people who help answer you. Deep Marketing Srl, which built and runs the site, processes it on the controller's behalf as data processor, and relies on these providers:
- Cloudflare, Inc. hosts the site and the enquiry archive, counts visits and protects the form;
- Resend (Plus Five Five, Inc.) sends the enquiry emails and the confirmations of receipt;
- TypeSafe AI, Inc. and OpenRouter, Inc. read the text of enquiries to recognise spam.
The data is never sold or made public.
Transfers outside the European Union
The providers listed above are based in the United States. The transfer relies on the EU-US Data Privacy Framework, where the provider has joined it, or on the standard contractual clauses approved by the European Commission.
Your rights
You can ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format or object to its use, by writing to welcome@ilbelpoggiosutodi.it.
If you believe your data is being handled improperly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live.