Pre-launch notice. The operator is Graffe S.r.l.. See the supplied legal and company details. A dedicated privacy contact and the hosting arrangements still need confirmation before public launch. This build is not approved as a complete statutory privacy notice.
Browsing and your privacy choice
Guide text and images are served by this site. We do not load advertising scripts, social-media widgets or third-party fonts. Without your permission, optional analytics stay off.
Your choice is saved in this browser’s local storage for up to 180 days. This is a preference, not a visitor ID. If storage is blocked, your choice lasts only for the current page. Use “Privacy choices” in the footer to change it. A browser Global Privacy Control or Do Not Track signal keeps optional analytics off.
Optional analytics
If you choose “Allow analytics,” we record a limited set of events: page views, submitted searches, destination clicks, neighborhood selections, map loads, booking-link clicks, property-link and property-map selections, and successful enquiries. Analytics contain a recognised page path and, where relevant, a city, country, provider, placement, area, property identifier, link type or result count from fixed lists.
The three source-bound Italian Rome, German Berlin and Greek Athens article URLs use the same optional, consent-gated fixed-path page-view policy; shared legal and navigation text remains English. We do not save raw search text, full URLs or query strings, referrers, IP addresses, browser fingerprints, visitor IDs, email addresses or enquiry messages in analytics. Timestamps are rounded to the minute. We count events, not unique people; these records cannot prove that a booking or a purchase happened.
You can withdraw permission at any time. This stops future events. Since no visitor identifier is retained, previous aggregate events cannot reliably be attributed to you for individual removal. The intended legal basis for optional measurement is consent.
Enquiries
If you submit the form, we store your enquiry type, name, email, optional property name, city and website, your message, a reference number and the submission time. We use this information to handle your request, not to build an advertising profile or mailing list.
The intended legal basis for a commercial enquiry is taking steps at your request before a contract; corrections and destination suggestions are handled in the legitimate interest of maintaining the guide. Privacy requests are handled to meet applicable legal obligations. The required checkbox acknowledges this notice; it is not consent to marketing. Anonymous visitor reports use the separate form below, not the advertising enquiry database.
Enquiries are stored in a private database on the application host. This build does not forward them to an email provider. Authorised staff must retrieve and handle them through the private operational inbox. Do not send payment information, identity documents, sensitive personal information or private details about third parties.
Anonymous problem reports
Report a problem works without a login, name, email, analytics consent or JavaScript. We store only the issue category, your plain-text message, the fixed page/section and language target, a random reference, time, private review status and any linked operator correction revision. Reports are not published, treated as votes or applied automatically. Please do not submit personal, booking, payment or third-party information. If you choose to type identifying details into the message, that text will be stored; we cannot promise absolute anonymity from your submission or hosting logs.
Raw reports are removed after 90 days when a new report is saved or the host-local maintenance command runs. Operators must separately review retained backups. A correction has its own immutable revision history and does not disappear just because the underlying report is deleted. Feedback requests are limited using a short-lived salted hash of the connection address in server memory; the address, hash, cookies, browser headers and raw URL are not stored with the report. A short-lived, same-site security cookie protects the form against cross-site submissions; it is not an analytics identifier. Hosting providers may maintain separate technical request logs; their actual policy still needs disclosure before launch.
Retention and security
The application uses a 90-day retention window for enquiries and event records, enforced on writes and by the maintenance command. Visitor reports use the separate 90-day process above. Deployment must schedule daily pruning and apply the same policy to backups. A matter that needs longer retention must be transferred to an appropriate business system under a separately disclosed policy.
For abuse prevention, a short-lived, salted hash of the connection address is held in server memory. It is not stored with analytics or enquiries. The application does not log enquiry contents. Infrastructure providers may process connection data in their own operational logs; the selected host, retention and processing arrangements must be disclosed before launch.
Maps and external booking sites
The initial area overview is local. The interactive street map loads only after you press its button. It then requests tiles from OpenStreetMap, which receives your IP address and technical request information. Read the OpenStreetMap Foundation privacy policy.
Booking links leave this site. The provider receives your connection information and, where configured, an affiliate account identifier. Its own privacy and booking terms apply. We do not receive your payment details or booking contents through this application.
Your rights and requests
Depending on the applicable law, you may have rights to access, correction, deletion, restriction, portability or objection, and to complain to a supervisory authority, including Italy’s Garante. You can send a privacy request through the enquiry form; include your enquiry reference if you have one, but no identity documents. A verified alternative contact must be published before launch.
Implementation notice last updated: 28 September 2026. The final operator and hosting details require a legal review before production use.