In short: we use your data to answer your requests, manage bookings and meet the legal obligations that apply to accommodation providers. Google Analytics statistics only run if you accept them. We do not sell your data and we do not build advertising profiles.
1. Data controller
Kind Places – Suite Experience, Via Francesco Saverio Correra 5, 80135 Naples (NA), Italy, VAT IT09198801210.
For any question about your data, email info@kindplaces.it or call +39 335 135 1729.
2. What data we process and why
Browsing the site
The servers hosting the site automatically log some technical data for each visit: IP address, date and time, requested page, browser and operating system. This keeps the site running and protects it from abuse and attacks.
Legal basis: legitimate interest in the security of the site (Art. 6(1)(f) GDPR).
Retention: only as long as strictly necessary, unless needed to investigate a crime.
Visit statistics
If you accept them in the banner, we use Google Analytics 4 to learn, in aggregate form, how many people visit the site, where they come from and which pages they view. We do not use this information to identify you or to show you ads.
Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Retention: statistics are kept in Google Analytics for up to 14 months.
Contact requests
If you email us, message us on WhatsApp or call us, we use your name, contact details and message to reply and, if you ask, to prepare a quote or a booking.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Retention: as long as needed to handle the request and no longer than 24 months after the last contact if no booking follows.
Bookings and your stay
To book and stay with us we process your name, contact details, dates of stay, number of guests, any special requests and payment details. On arrival we also collect the identity document details of every guest.
- Managing the booking, stay and payment — performance of a contract (Art. 6(1)(b) GDPR).
- Reporting guests' details to the police (Questura) through the Alloggiati Web portal, as required by Article 109 of the Italian Consolidated Public Security Act (T.U.L.P.S.) — legal obligation (Art. 6(1)(c) GDPR).
- Charging and paying the tourist tax to the City of Naples and sending anonymous arrival and occupancy statistics (ISTAT, Campania Region) — legal obligation.
- Issuing and keeping invoices and receipts — legal obligation.
Retention: for the duration of the relationship and then 10 years for tax and accounting records (Art. 2220 of the Italian Civil Code). We do not keep the data sent to the police beyond what the law allows.
Without this data we cannot accept your booking or host you.
3. Who we share data with
Your data is processed by us and, only as far as necessary, by providers acting on our behalf as processors (Art. 28 GDPR) or as independent controllers:
- Beddy — the booking engine at the bottom of every page and on kindplaces.beddy.io, which handles availability searches and direct bookings.
- Stripe — card payment processing and fraud prevention for bookings made through Beddy.
- Google — Google Tag Manager, which loads the site's tools without setting cookies, Google Analytics (only with consent) and Google Fonts, which serves the site's typefaces.
- Meta (WhatsApp) — only if you choose to message us on WhatsApp; Meta processes the data as an independent controller under its own privacy policy.
- The site's hosting provider, and our tax and accounting advisers.
- Public authorities (police, City of Naples, Italian Revenue Agency, ISTAT) where required by law.
If you book through platforms such as Booking.com, those platforms process your data as independent controllers under their own privacy policies.
4. Transfers outside the European Union
Google, Stripe and Meta may process data in the United States. These companies are certified under the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023, and in any case use the Commission's standard contractual clauses.
5. Cookies
Cookies are small text files that the site stores in your browser. We use technical cookies, which do not need consent because the site needs them to work, and Google Analytics statistics cookies, which are only set if you accept them. We currently use no marketing or profiling cookies.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
kp_cookie_consent | Kind Places | Remembers your cookie choices | 6 months | Technical |
__stripe_mid | Stripe, via Beddy | Payment fraud prevention | 1 year | Technical |
__stripe_sid | Stripe, via Beddy | Payment fraud prevention | 30 minutes | Technical |
_ga | Google Analytics | Tells visitors apart under a pseudonym | 2 years | Statistics, with consent |
_ga_DHKH3V0XFZ | Google Analytics | Keeps track of the visit session | 2 years | Statistics, with consent |
Google Consent Mode
The site uses Google Consent Mode v2. Until you accept statistics cookies, Google Analytics neither stores nor reads cookies on your device and only receives technical signals without identifiers (for example, that a page was viewed and that consent was denied), which Google uses in aggregate form. Google Analytics 4 does not log or store IP addresses.
Google Fonts
The site's typefaces are loaded from Google's servers, so your browser sends its IP address to Google. Google Fonts does not set cookies.
Managing cookies
On your first visit a banner lets you accept, reject or choose individual categories. Closing the banner with the X counts as rejecting. Your choice is kept for 6 months, after which we ask again. You can change it at any time:
You can also delete or block cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
6. Your rights
At any time you can ask us to access, correct or erase your data, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest (Articles 15–22 GDPR). If you gave consent you can withdraw it whenever you like, without affecting processing already carried out.
To exercise your rights, email info@kindplaces.it: we reply within one month. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
7. Changes
We may update this page if the services used by the site or the law change. The date at the top shows the latest revision. If we add cookies that need consent, the banner will ask for your choice again.