Last updated: October 18, 2026

La Sulla Hospitality respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, contact us, work with us as a homeowner or client, make or inquire about a reservation, stay at a property managed by us, subscribe to our communications, or otherwise interact with La Sulla Hospitality.

1. Who We Are

La Sulla Hospitality is a hospitality and property management business providing vacation rental management, home stewardship, and related services in Tuscany, Italy.

Data Controller:
Jason DiLoreti, operating under the commercial name La Sulla Hospitality
Business address: Piazza Branchi, 1, 50050 Montaione (FI)
P. IVA: 07130570489
Email: casa@lasulla.com

For personal data processed for La Sulla Hospitality's own business purposes, Jason DiLoreti / La Sulla Hospitality acts as the data controller.

For certain guest and property-related activities, the relevant property owner or accommodation provider may also act as a data controller, while La Sulla Hospitality may process information on that party's behalf or for its own legitimate and legal purposes. Where appropriate, the applicable booking or service documentation will identify the relevant parties and their roles.

2. Personal Information We May Collect

Depending on how you interact with us, we may collect the following categories of information.

Contact Information

This may include:

• name;

• email address;

• telephone number;

• mailing or billing address;

• preferred communication method.

Owner and Property Information

For homeowners, prospective clients, and managed properties, this may include:

• property details;

• ownership and billing information;

• service requirements;

• property availability;

• access information;

• maintenance history;

• vendor information;

• photographs and property documentation;

• insurance information;

• information necessary to manage, market, maintain, or care for the property.

Reservation and Stay Information

For guests and prospective guests, this may include:

• names and contact information;

• arrival and departure dates;

• number and composition of guests;

• reservation information;

• property selected;

• special requests;

• arrival information;

• communications relating to the reservation or stay;

• information necessary to provide accommodation and guest services.

Identification and Regulatory Information

Where required by law or necessary to administer a stay, we may collect identification information relating to guests.

This may include information required for legally mandated guest identification, registration, security, verification, tourism reporting, or other regulatory requirements.

Payment and Transaction Information

We may process information relating to:

• reservation amounts;

• invoices;

• deposits;

• refunds;

• service charges;

• owner statements;

• transaction records;

• billing information.

Payment card information may be processed directly by third-party payment processors or booking platforms and may not be stored by La Sulla Hospitality.

Communications

We may maintain records of communications with you, including:

• emails;

• WhatsApp messages;

• contact-form submissions;

• booking messages;

• telephone communications;

• owner communications;

• guest-service requests;

• other correspondence.

Marketing Preferences

We may collect information about:

• newsletter subscriptions;

• marketing consent;

• communication preferences;

• unsubscribe requests;

• the type of communications in which you have expressed an interest.

Website and Technical Information

Depending on the technology used on our website, booking system, or connected services, technical information may include:

• IP address;

• browser and device information;

• approximate location derived from IP address;

• website activity;

• referral source;

• cookie or similar identifiers;

• technical diagnostic information.

Non-essential analytics or tracking technologies will be used only where permitted by applicable law and, where required, after appropriate consent has been obtained.

3. Sensitive or Special-Category Information

Please do not send sensitive personal information through our general website contact forms unless it is reasonably necessary.

A guest may occasionally voluntarily provide information relating to health, disability, accessibility, allergies, or similar matters in order to request assistance or accommodation.

Where such information qualifies as special-category personal data under applicable law, we will process it only where we have an appropriate legal basis, including explicit consent where required, and only to the extent reasonably necessary for the relevant request.

4. How We Use Personal Information

We may use personal information to:

• respond to inquiries;

• schedule calls and meetings;

• assess potential client or property relationships;

• prepare proposals or service agreements;

• provide vacation rental management services;

• provide home stewardship services;

• manage owner relationships;

• market and administer vacation rental properties;

• process reservation inquiries and bookings;

• communicate with guests before, during, and after a stay;

• provide check-in, arrival, guest-service, and departure information;

• coordinate housekeeping, maintenance, vendors, and property operations;

• process or administer payments, invoices, deposits, refunds, and accounting records;

• meet guest-registration, tourism-reporting, tax, accounting, legal, safety, and regulatory obligations;

• investigate or respond to property damage, disputes, chargebacks, fraud, or security issues;

• maintain appropriate business records;

• protect our clients, guests, properties, systems, and legal rights;

• improve our website and services;

• manage newsletter subscriptions and marketing preferences;

• send marketing communications where permitted by law.

5. Legal Bases for Processing

We process personal information only where we have an appropriate legal basis.

Depending on the circumstances, these may include:

Performance of a Contract

Processing may be necessary to perform a contract with you or take steps at your request before entering into a contract.

Examples include responding to an owner inquiry, preparing a management proposal, administering a reservation, or providing agreed services.

Legal Obligations

We may process information where necessary to comply with legal obligations, including obligations relating to:

• taxation;

• accounting;

• guest identification and registration;

• tourism reporting;

• public authorities;

• consumer protection;

• safety;

• regulatory compliance.

Legitimate Interests

We may process information where reasonably necessary for legitimate business purposes, provided those interests are not overridden by your rights and freedoms.

These purposes may include:

• operating and protecting our business;

• maintaining records;

• preventing fraud and misuse;

• defending legal claims;

• improving our services;

• managing relationships with clients and guests;

• ensuring property and guest safety.

Consent

Where required, we rely on consent, including for:

• email marketing;

• certain cookies or tracking technologies;

• certain processing of sensitive information;

• other activities for which applicable law requires consent.

You may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Owner and Guest Newsletters

La Sulla Hospitality may periodically send newsletters and other promotional communications.

We may maintain separate communications for different audiences.

Homeowner Communications

These may include:

• property-care advice;

• information about owning and managing a home in Tuscany;

• hospitality insights;

• La Sulla services;

• company news;

• relevant local information.

Guest and Traveler Communications

These may include:

• destination information;

• travel inspiration;

• La Sulla news;

• featured properties;

• special offers;

• future-stay opportunities.

Subscribing to one category of communication does not automatically subscribe you to another.

Where consent is required, promotional communications will be sent only where the recipient has actively opted in or where another specific legal exception applies.

Marketing consent is voluntary.

You are not required to subscribe to marketing communications in order to:

• make a reservation;

• contact us;

• receive property-management services;

• receive home-stewardship services.

Marketing consent will not be bundled with acceptance of booking terms or service agreements.

Every marketing email will include an appropriate method to unsubscribe.

We may retain limited suppression information following an unsubscribe request where necessary to ensure that the relevant email address is not inadvertently added back to a marketing list.

Reservation confirmations, arrival information, safety notices, owner-service updates, invoices, payment information, and other communications necessary to administer an existing relationship are service communications and are not treated as marketing communications.

If we use email technologies that measure individual opens, clicks, or other interactions, we will use such technologies only in accordance with applicable law and obtain consent where required.

7. Direct Reservations and Booking Platforms

La Sulla Hospitality may offer direct reservations for vacation rental properties through third-party booking technology.

Our direct booking experience may:

• carry La Sulla Hospitality branding;

• be accessed through a La Sulla Hospitality website or web address;

• open in a separate browser tab;

• be technically hosted or operated by an external booking-system provider.

This may include platforms such as Prohost or another property-management or direct-booking provider selected by La Sulla Hospitality.

When you make a reservation, information may be shared among parties involved in administering the reservation, including:

• La Sulla Hospitality;

• the relevant property owner or accommodation provider;

• the booking technology provider;

• payment processors;

• guest-verification providers;

• operational service providers;

• public authorities where legally required.

Additional privacy information, booking terms, cookie information, or consent choices may be presented during the booking process.

Those notices apply in addition to this Privacy Policy where relevant.

8. Property Owners and Accommodation Providers

Properties marketed or managed by La Sulla Hospitality may be owned by independent third parties.

Unless otherwise stated, the relevant property owner or accommodation provider remains responsible for the provision of the accommodation.

Personal information relating to guests may therefore be shared with the relevant owner or accommodation provider where reasonably necessary to:

• administer a reservation;

• comply with legal obligations;

• manage the property;

• resolve disputes;

• provide the accommodation or associated services.

9. Service Providers and Other Recipients

We may use trusted third-party providers to operate La Sulla Hospitality.

These may include providers of:

• website hosting and website technology;

• cloud storage and email;

• calendar and scheduling systems;

• property-management systems;

• direct-booking technology;

• customer relationship management systems;

• payment processing;

• accounting and financial services;

• guest verification;

• digital check-in;

• pricing and revenue-management tools;

• email marketing;

• analytics;

• cybersecurity and IT services;

• legal, accounting, and professional services.

We may also share limited information where reasonably necessary with property-level service providers such as:

• housekeepers;

• maintenance personnel;

• technicians;

• tradespeople;

• transportation providers;

• guest-service providers;

• other local operational partners.

Information will be limited to what is reasonably necessary for the relevant purpose.

Depending on the activity, such recipients may act as processors acting on our instructions or as independent data controllers.

10. Public Authorities and Legal Compliance

Where required by applicable law, certain information may be provided to public authorities.

This may include information relating to:

• guest identification and registration;

• public-security requirements;

• tourism statistics;

• taxation;

• tourist taxes;

• accounting;

• judicial or regulatory requests.

We may also disclose information where reasonably necessary to establish, exercise, or defend legal rights.

11. Cookies and Similar Technologies

Technical storage. Our website is built and hosted on Framer. It uses only the technical cookies or storage needed for the site to work and to remember your cookie choice. These do not require consent.

Website statistics. We use Framer's built-in analytics to measure visits in aggregate.

Google Analytics. With your consent, we use Google Analytics 4, provided by Google Ireland Limited, to understand how visitors use the site: pages viewed, time on site, approximate location (country or city), device and browser type, and how visitors arrived. Google Analytics does not load until you click "Accept analytics." If you click "Reject" or make no choice, it does not load. Google Analytics sets cookies whose names begin with "_ga" and that last up to 2 years. Data may be processed by Google in the United States under the EU-US Data Privacy Framework. We do not use Google Analytics for advertising.

Changing your choice. You can change or withdraw your consent at any time using the "Manage cookie preferences" button at the top of this page.

Third-party links. Links to Google Calendar appointment scheduling, WhatsApp, Instagram and LinkedIn take you to services that apply their own privacy and cookie policies.

12. International Data Transfers

Some service providers used by La Sulla Hospitality may process personal information outside Italy or the European Economic Area.

Where a transfer of personal information requires legal safeguards, we will rely on an appropriate mechanism under applicable data-protection law.

Depending on the circumstances, this may include:

• an adequacy decision;

• Standard Contractual Clauses;

• another legally recognized transfer mechanism.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, regulatory, accounting, contractual, or dispute-related requirements.

Retention periods vary depending on the information and relationship.

Inquiries and Prospective Clients

Information relating to an inquiry that does not result in a business relationship may generally be retained for up to 24 months after the last meaningful interaction, unless there is a legitimate reason or legal requirement to retain it longer.

Client, Contractual, Accounting and Transaction Records

Records relating to contracts, invoices, transactions, and accounting may generally be retained for the period required by Italian law, which may extend to 10 years or longer where legally necessary.

Reservation and Guest Records

Reservation records may be retained for contractual, accounting, tax, dispute-resolution, security, and legal purposes.

Information collected specifically to satisfy guest-registration or other regulatory obligations will be processed and retained in accordance with the relevant legal requirements.

Marketing Information

Marketing information may be retained until:

• consent is withdrawn;

• the recipient unsubscribes;

• the relevant marketing purpose ends;

• continued retention is no longer appropriate.

Suppression Records

Limited information may be retained after an unsubscribe request to ensure that the request continues to be respected.

Disputes and Legal Claims

Information relevant to litigation, disputes, fraud prevention, chargebacks, or legal claims may be retained for the period necessary to establish, exercise, or defend our rights.

14. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• obtain confirmation that your personal data is being processed;

• access personal information we hold about you;

• correct inaccurate or incomplete information;

• request deletion of personal information;

• request restriction of processing;

• object to certain processing;

• object to direct marketing at any time;

• request portability of certain personal data;

• withdraw consent where processing relies on consent;

• lodge a complaint with a supervisory authority.

In Italy, the competent supervisory authority is:

Garante per la Protezione dei Dati Personali

To exercise your rights with La Sulla Hospitality, contact:

casa@lasulla.com

We may request reasonable information to verify your identity before completing a request.

15. Children and Minors

Reservations must be made by an adult legally capable of entering into the relevant agreement.

Information about minors may nevertheless be processed where minors are members of a traveling party or where their information is necessary for legal, operational, or safety purposes.

We do not knowingly use children's personal information for direct marketing.

16. Security

We use reasonable technical and organizational measures intended to protect personal information against:

• unauthorized access;

• accidental loss;

• misuse;

• disclosure;

• alteration;

• destruction.

Access to personal information is limited to people and service providers who reasonably require it for their duties.

No internet-based or electronic system can be guaranteed to be completely secure.

17. Third-Party Websites and Services

Our website may contain links to services operated independently by third parties, including:

• booking platforms;

• social media platforms;

• maps;

• scheduling tools;

• payment providers;

• travel or local-service providers.

Independent third parties are responsible for their own privacy practices.

We encourage you to review their privacy information before providing personal data.

18. Changes to This Privacy Policy

Our business, technology, properties, and services may evolve.

We may update this Privacy Policy to reflect changes in:

• our operations;

• technology providers;

• booking systems;

• marketing activities;

• applicable law.

The current version will be published on the La Sulla Hospitality website together with its most recent revision date.

19. Contact Us

Questions regarding this Privacy Policy or La Sulla Hospitality's handling of personal information may be directed to:

La Sulla Hospitality
Jason DiLoreti
Business address: Piazza Branchi, 1, 50050 Montaione (FI)
P. IVA: 07130570489
Email: casa@lasulla.com