Privacy and cookies

In short: we use your data to answer your requests, manage bookings and meet the legal obligations that apply to accommodation providers. Google Analytics statistics and the Meta Pixel, which we use to measure our advertising campaigns, only run if you accept them. We do not sell your data.

1. Data controller

Kind Places – Suite Experience, Via Francesco Saverio Correra 5, 80135 Naples (NA), Italy, VAT IT09198801210.
For any question about your data, email info@kindplaces.it or call +39 335 135 1729.

2. What data we process and why

Browsing the site

The servers hosting the site automatically log some technical data for each visit: IP address, date and time, requested page, browser and operating system. This keeps the site running and protects it from abuse and attacks.
Legal basis: legitimate interest in the security of the site (Art. 6(1)(f) GDPR).
Retention: only as long as strictly necessary, unless needed to investigate a crime.

Visit statistics

If you accept them in the banner, we use Google Analytics 4 to learn, in aggregate form, how many people visit the site, where they come from and which pages they view. We do not use this information to identify you or to show you ads.
Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Retention: statistics are kept in Google Analytics for up to 14 months.

Advertising and campaign measurement (Meta Pixel)

If you accept marketing cookies in the banner, the site runs the Meta Pixel from Meta Platforms Ireland Ltd. The Pixel sends Meta the pages you visit, some of the actions you take on the site, your IP address, browser and device details and the identifiers stored in cookies. We use this to learn how many people reach the site from our Facebook and Instagram ads, to measure their results and to show our ads to people who have already visited the site or to people with similar interests. If you have a Facebook or Instagram account, Meta may link this data to your profile.
Joint controllership: for collecting data through the Pixel and sending it to Meta, we are joint controllers with Meta Platforms Ireland Ltd (Art. 26 GDPR) under Meta's Controller Addendum. Any further processing is carried out by Meta as an independent controller under its Privacy Policy.
Legal basis: consent (Art. 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), which you can withdraw at any time.
Retention: the Pixel's cookies last up to 3 months. Data received by Meta is kept under Meta's own rules.

Contact requests

If you email us, message us on WhatsApp or call us, we use your name, contact details and message to reply and, if you ask, to prepare a quote or a booking.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Retention: as long as needed to handle the request and no longer than 24 months after the last contact if no booking follows.

Bookings and your stay

To book and stay with us we process your name, contact details, dates of stay, number of guests, any special requests and payment details. On arrival we also collect the identity document details of every guest.

• Managing the booking, stay and payment — performance of a contract (Art. 6(1)(b) GDPR).
• Reporting guests' details to the police (Questura) through the Alloggiati Web portal, as required by Article 109 of the Italian Consolidated Public Security Act (T.U.L.P.S.) — legal obligation (Art. 6(1)(c) GDPR).
• Charging and paying the tourist tax to the City of Naples and sending anonymous arrival and occupancy statistics (ISTAT, Campania Region) — legal obligation.
• Issuing and keeping invoices and receipts — legal obligation.

Retention: for the duration of the relationship and then 10 years for tax and accounting records (Art. 2220 of the Italian Civil Code). We do not keep the data sent to the police beyond what the law allows.
Without this data we cannot accept your booking or host you.

3. Who we share data with

Your data is processed by us and, only as far as necessary, by providers acting on our behalf as processors (Art. 28 GDPR) or as independent controllers:

• Beddy — the booking engine at the bottom of every page and on kindplaces.beddy.io, which handles availability searches and direct bookings.
• Stripe — card payment processing and fraud prevention for bookings made through Beddy.
• Google — Google Tag Manager, which loads the site's tools without setting cookies, Google Analytics (only with consent) and Google Fonts, which serves the site's typefaces.
• Meta — the Meta Pixel (only with consent to marketing cookies), with Meta as joint controller for data collection, and WhatsApp, only if you choose to message us there. Otherwise Meta processes the data as an independent controller under its own privacy policy.
• The site's hosting provider, and our tax and accounting advisers.
• Public authorities (police, City of Naples, Italian Revenue Agency, ISTAT) where required by law.

If you book through platforms such as Booking.com, those platforms process your data as independent controllers under their own privacy policies.

4. Transfers outside the European Union

Google, Stripe and Meta may process data in the United States. These companies are certified under the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023, and in any case use the Commission's standard contractual clauses.

5. Cookies

Cookies are small text files that the site stores in your browser. We use technical cookies, which do not need consent because the site needs them to work, Google Analytics statistics cookies and Meta Pixel marketing cookies. The last two types are only set if you accept them.

Google Consent Mode

The site uses Google Consent Mode v2. Until you accept statistics cookies, Google Analytics neither stores nor reads cookies on your device and only receives technical signals without identifiers (for example, that a page was viewed and that consent was denied), which Google uses in aggregate form. Google Analytics 4 does not log or store IP addresses.

Meta Pixel

The Meta Pixel only loads after you accept marketing cookies. If you reject them or withdraw consent, the site sends no data to Meta and deletes the _fbp and _fbc cookies. The fr cookie belongs to Facebook's domain: you can manage it in your browser settings and choose which ads you see in Meta's ad preferences.

Google Fonts

The site's typefaces are loaded from Google's servers, so your browser sends its IP address to Google. Google Fonts does not set cookies.

Managing cookies

On your first visit a banner lets you accept, reject or choose individual categories. Closing the banner with the X counts as rejecting. Your choice is kept for 6 months, after which we ask again. You can change it at any time:

Open cookie preferences

You can also delete or block cookies in your browser settings, or install the Google Analytics opt-out browser add-on.

6. Your rights

At any time you can ask us to access, correct or erase your data, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest (Articles 15–22 GDPR). If you gave consent you can withdraw it whenever you like, without affecting processing already carried out.

To exercise your rights, email info@kindplaces.it: we reply within one month. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

7. Changes

We may update this page if the services used by the site or the law change. The date at the top shows the latest revision. If we add cookies that need consent, the banner will ask for your choice again.