Privacy Policy

This privacy policy explains how Casa Miúda (managed by Nudo e Crudo) collects, uses and protects your personal data when you visit our website, book a stay, use our check-in system, or stay at the house.

1. Data Controller

The data controller is Casa Miúda / Nudo e Crudo. If you have any questions about how your data is handled, contact us at team@nudoandcrudo.com.

2. Data We Collect

We collect and process the following categories of personal data:

Guest registration data (legal obligation). Italian law (art. 109 TULPS) requires us to register each guest with the local police. We collect: surname, name, sex, date of birth, place of birth, country of birth, citizenship, document type, document number, and place of issue. This data is stored in our Firestore database.

Document images (legal obligation). Photos of identity documents are uploaded to Firebase Storage and automatically deleted 7 days after check-out.

Booking metadata (contract performance). Your booking label, check-in and check-out dates, door PIN, and door access counters are stored in Firestore.

Door events (legitimate interest). Timestamps and IP addresses of successful door openings are logged for security purposes. There is no automatic purge.

Administrator data (legitimate interest). Email addresses of admins who create or verify bookings are retained.

Telegram notifications (best-effort). The host receives booking labels and tokens (no guest PII) via Telegram. This is a non-blocking, best-effort notification.

Font loading (standard HTTP data). When you load the site, Google Fonts and Fontshare receive standard HTTP request data including your IP address.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

Legal obligation. Guest registration data and document images are processed to comply with Italian law (art. 109 TULPS).

Contract performance. Booking metadata and door access data are processed to fulfil our agreement with you.

Legitimate interest. Door events and administrator data are processed for security and operational oversight.

Consent. Where required, we will ask for your explicit consent before processing your data.

4. Data Retention

We retain your data for the following periods:

Document images: 7 days after check-out, then permanently deleted.

Guest records and check-in metadata: Retained indefinitely to comply with our legal obligation to maintain Alloggiati records.

Door events: No automatic purge is applied.

Cloud Functions logs: Automatically deleted after approximately 30 days.

5. Third-Party Processors

Your data is processed by the following third parties:

Google Cloud / Firebase (EU region europe-west1) - hosting, database, storage, and analytics.

HiveMQ (German company) - door communication. No personal data is transmitted to HiveMQ.

Telegram - notification messages. Minimal data (booking label, token) is sent; no guest PII is shared.

Google Fonts and Fontshare - font delivery. Standard HTTP request data (including IP address) is processed.

6. Cookies and Tracking

We do not use cookies on this website. We use localStorage to remember your language preference, which is strictly necessary for the functionality of the site. No tracking scripts, analytics, or advertising cookies are used on guest-facing pages.

7. Firebase Analytics

Firebase Analytics (Measurement ID G-5NDCY3VWKH) is used exclusively on the admin page for usage monitoring. No analytics data is collected on guest-facing pages such as the main site, house guide, check-in, or privacy policy.

8. Your Rights

Under applicable data protection law, you have the following rights:

Access: request a copy of your personal data.

Rectification: correct inaccurate or incomplete data.

Erasure: request deletion of your data, subject to legal obligations.

Restriction: limit how we process your data.

Objection: object to processing based on legitimate interest.

Portability: receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at team@nudoandcrudo.com.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this privacy policy or how we handle your personal data, please contact us at team@nudoandcrudo.com.