Home/Privacy and cookies
Privacy and cookies
This page describes how we process the personal data of people who visit this website or contact us. Last updated: 26 October 2026.
Data controller
L'Albero di Gamelì — Nucleo Abitato Giovancorso, 26 — 53043 Chiusi (Siena), Italy.
Email: info@gameli.it — +39 0578 226310.
What data we process
You do not need to give us any data to browse this website: there are no forms that send information to our servers and we do not use analytics.
If you write to us by email or on WhatsApp, or call us, we use the data you give us (name, contact details, dates of stay, any preferences) to reply and handle your request.
Online bookings are made through the Magellano booking system of MediaLab S.r.l. (Italy), which processes the data entered in the booking form on our behalf; the booking page has its own privacy notice.
On arrival we collect the data required by law: guests' personal details, which we are required to report to the Italian public security authorities (art. 109 T.U.L.P.S.), and the data needed for tax and statistical obligations.
Your data is never passed on to third parties for marketing purposes.
Cookies
This website does not use profiling cookies or analytics and does not track browsing. The only thing our website stores in your browser is your choice on the initial notice (in the browser's local storage, without cookies).
Fonts are hosted on our own server: the pages send no requests to Google. Some features are loaded from external providers, who receive the visitor's IP address and process it according to their own privacy policies:
- Magellano (MediaLab S.r.l., Italy) — the booking form, loaded on the pages that contain it.
- OpenStreetMap (OpenStreetMap Foundation, United Kingdom) — the map tiles on the Contact and What to see pages; privacy policy.
- WhatsApp (WhatsApp Ireland Limited) — only if you choose to write to us on WhatsApp; privacy policy.
Legal basis
Processing is based on the following legal grounds (art. 6 of Regulation (EU) 2016/679, GDPR):
- Performance of a contract or pre-contractual measures (art. 6.1.b) — replies to enquiries, bookings and correspondence about your stay.
- Legal obligation (art. 6.1.c) — reports to the public security authorities, tax, statistical and administrative obligations.
- Legitimate interest (art. 6.1.f) — operation and security of the website and storing your choice on the initial notice.
Transfers outside the European Union
Some providers may also process data outside the European Economic Area — for example the OpenStreetMap Foundation (United Kingdom) or, if you write to us on WhatsApp, the Meta group — on the basis of the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).
Retention
Correspondence is kept for as long as needed to handle your request and your stay, then deleted; data contained in tax documents is kept for the period required by law (usually ten years).
Your rights
Under the GDPR you can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it). To exercise your rights, simply write to info@gameli.it.
Images
Photographs of the property belong to L'Albero di Gamelì or to the photographers who took them. Third-party photos show the author and the Creative Commons licence; adapted versions of photos licensed under CC BY-SA are distributed under the same licence. Images of the partner thermal spas belong to their respective owners.
