Privacy Policy

1. Data controller

The two Daymoon House properties have different owners, who through this website collect and handle visitors' enquiries together. They are therefore joint controllers of the data collected via daymoonhouse.com, pursuant to Art. 26 GDPR:

Clelia Iannella, for Daymoon House Merliani; Patrizia Gazzerro and Giuseppe Gazzerro, for Daymoon House Vanvitelli.

To exercise the rights described in this notice, or for any question about how your personal data is handled, please write to daymoonhousenapoli@gmail.com: it is the joint controllers' single point of contact and answers every request, whichever property it concerns.

2. Data collected

Through the contact form on this website we collect only the information you voluntarily provide: first name, last name, email address, intended stay dates (arrival and departure) and, optionally, a message.

The form collects nothing else: no browsing data, no IP address is retained, and no technical information beyond what is described in the "Cookies and tracking" section, which explains the website's usage statistics.

3. Purpose of processing

Your data is used solely to respond to enquiries and quotation requests submitted through the contact form. It is not used for marketing, profiling, or any other purpose.

The legal basis for processing is the controller's legitimate interest in responding to incoming requests (Art. 6(1)(f) GDPR) and, where applicable, pre-contractual measures requested by the data subject (Art. 6(1)(b)).

4. Recipients

Data submitted through the contact form is transmitted to AvaiBook S.L. (Grupo TecnoCasa), the booking-system provider used to manage stay requests. AvaiBook acts as a data processor under Art. 28 GDPR.

The website is hosted on Cloudflare, Inc. infrastructure, which processes data solely as a sub-processor for hosting and encrypted transmission (TLS). Cloudflare does not have access to the content of requests.

Website images are served via Cloudinary (Cloudinary Ltd.), acting as a CDN for media files only. Cloudinary does not process personal data of site users.

Data is not shared with other parties or transferred outside the European Economic Area, except as strictly necessary for the services described above and in compliance with the safeguards required by the GDPR.

5. Cookies and tracking

This website does not use profiling cookies and installs no advertising or third-party tracking tags. Only strictly necessary technical cookies may be used for the website to function correctly; these do not require user consent.

To understand how the website is used we collect aggregate statistics, without cookies and without storing any identifier on your device. On each visit a non-reversible code is derived from your IP address and browser, combined with a secret ingredient that is replaced every night: the IP address is never stored and the code changes daily, so you cannot be recognised from one day to the next, nor identified.

Only the pages opened, the actions taken on the site (dates checked, quotes viewed, booking requests and their outcome), the approximate location — city and country — that the network associates with the connection, and the kind of site you arrived from (for example "a search engine" or "a social network"), reduced to a closed list of categories, are linked to that code; neither the IP address nor the address of the referring page is ever retained. This data is kept for a maximum of 400 days and is used solely to measure and improve the website, on the basis of the controller's legitimate interest (Art. 6(1)(f) GDPR). We also use Cloudflare Web Analytics, which measures visits without cookies and without profiling.

6. Your rights

Under Articles 15–22 of the GDPR you have the right to: access your personal data; request its rectification or erasure; obtain restriction of processing; receive your data in a portable format; and object to processing.

To exercise any of these rights, write to daymoonhousenapoli@gmail.com. You will receive a response within thirty days of receipt of your request, unless an extension is required for complex cases.

You may also lodge a complaint with your national supervisory authority. In Italy: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it.

7. Last updated

This notice was last updated on 10 June 2026. Any future changes will be published on this page.