Domus Partner
Privacy Policy
This notice explains how personal data is processed when using the Domus Partner website and services.
1. Data Controller
The data controller is Giulio Indino, VAT number 05728270280, operating under the Italian flat-rate tax scheme. The business provides short-term rental property management and real estate consulting, with operational base in Lecce, Salento, Puglia, Italy.
For privacy-related requests, you can write to domuspartner.it@gmail.com or call +39 320 038 2440.
2. Data collected
We collect data voluntarily provided through contact forms or WhatsApp messages, including name, email address, phone number and message content.
We also collect technical browsing data automatically, such as IP address, user agent, referrer, visited pages, timestamp and screen resolution. This data may be processed through Lovable hosting web vitals for website performance and technical stability purposes.
3. Purposes of processing
Data is processed to respond to contact requests, manage bookings and relationships with guests and property owners, comply with tax and regulatory obligations, and monitor the technical performance and stability of the website.
4. Legal basis
The legal basis is performance of a contract or pre-contractual measures under Art. 6.1.b GDPR for contact requests and bookings, legitimate interest under Art. 6.1.f GDPR for technical monitoring and security, and legal obligation under Art. 6.1.c GDPR for tax compliance.
5. Data retention
Contact data is retained for 24 months from the last contact or until withdrawal. Booking data is retained according to statutory accounting terms, up to 10 years. Aggregated technical logs for performance purposes are retained for up to 12 months.
6. Recipients and sub-processors
Data may be processed by Lovable, the website hosting provider and technical web vitals supplier, as described in its privacy notice available at lovable.dev/privacy. Data may also be processed by Google for the Gmail account domuspartner.it@gmail.com, and by Smoobu as booking channel manager.
For the WhatsApp Business messaging channel, contact data (phone number) and message content are processed by Meta Platforms Ireland Limited as a sub-processor, with possible storage and transfer to Meta Platforms Inc. in the United States. The WhatsApp channel is used solely for stay-related communications: identity documents are never collected via WhatsApp.
For drafting replies to messages received via WhatsApp, the message text, the guest’s name and essential stay details may be processed by an artificial intelligence model provided by Anthropic PBC (United States), acting as a data processor on our behalf and not using such data to train its models. Every reply is always reviewed and approved by a person before it is sent: no message is sent automatically. Transfers to the United States take place on the basis of the Standard Contractual Clauses. Identity documents are never transmitted, as they remain managed exclusively through the dedicated service for legal compliance obligations.
For internal notification and manual approval of replies, the guest’s name, an excerpt of the received message and the related draft reply are transmitted through the Telegram messaging service (Telegram Messenger Inc.), used as an operational channel restricted to the data controller. Identity documents never pass through this channel either. Any transfers to third countries connected with this service take place with the safeguards described below.
Any transfers to third countries take place only where adequate safeguards are in place, such as the EU-US Data Privacy Framework adequacy decision or the Standard Contractual Clauses approved by the European Commission.
7. Data subject rights
Data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection by writing to domuspartner.it@gmail.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority through garanteprivacy.it.
8. Minors
The website does not knowingly collect personal data from children under 16.
9. Updates
Last reviewed: August 1, 2026.