Privacy notice
Last updated: 19 Aug 2026
This notice explains what we collect when you book on this site, why we process it and what rights you have. It is written under articles 13 and 14 of Regulation (EU) 2016/679.
Who controls your data
La Maison du Lion, Piazzale Emanuele Ferro 2, 19123 La Spezia (SP).
For anything concerning your data write to lamaisondulion24@gmail.com or call +39 351 982 3747. We answer within a month.
What we collect
When you book: your name, email address, phone number if you give one, the dates of your stay, the room, how many guests and the ages of any children, and whatever you write in the notes.
We never see your card details. Payment goes through our provider Stripe, which tells us only whether it succeeded.
Like any website, our servers log the IP address, the time of the request and the browser. That keeps the site running and defends it against abuse.
On arrival we are required by law to record an identity document for every guest. That happens at the property, not on this site.
Why we process it, and on what basis
To handle your booking and your stay: performance of the contract between us (art. 6.1.b GDPR). Without this we cannot confirm a room.
To meet legal obligations (art. 6.1.c GDPR): reporting guests to the police through Alloggiati Web, statistical returns, the city tax, and keeping accounting records.
To keep the site secure and prevent abuse: our legitimate interest (art. 6.1.f GDPR).
We do not profile you, we make no automated decisions about you, and we do not send you marketing you did not ask for.
Who we share it with
Stripe Payments Europe Ltd., to take the payment.
Resend, to send your booking confirmation by email.
Vercel and Neon, which host the site and the database respectively.
The Italian State Police, through the Alloggiati Web portal, and the Comune della Spezia for the city tax: these are legal obligations, not choices of ours.
None of them process your data for their own purposes. We sell data to nobody.
Transfers outside the European Union
Some providers may process data outside the European Economic Area. Where they do, the transfer is covered by the standard contractual clauses approved by the European Commission.
How long we keep it
Booking records are kept for ten years after the stay ends, which is the retention period Italian law sets for accounting documents.
Enquiries that never become bookings are deleted after twelve months.
Technical server logs are kept briefly and then discarded.
Your rights
You can ask us for access to your data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (arts. 15-22 GDPR).
Some data we cannot delete on request: what tax law or public-security rules oblige us to keep. Where that applies we will tell you why.
Write to lamaisondulion24@gmail.com to exercise any of these rights.
Complaints
If you believe we handle your data improperly you can complain to the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or to the supervisory authority of the country where you live.