Privacy notice

Your data, explained without the runaround

This page says what data we collect, why, who we share it with and how you can have it deleted. It's written to be read, not skipped.

Last updated: 24 September 2026

Who handles your data

The data controller is Select Group S.r.l., Via Municipio 11, 88040 Serrastretta (CZ), Italy, VAT and tax code 04071520797, trading under the name Lucia Vacanze.

For anything concerning your data, write to [email protected] or by certified email to [email protected]. We reply within 30 days, usually much sooner.

What we collect, and only when it's needed

If you ask for a quote

Dates, number of guests, any pets. No personal data. The request is passed to our booking system to work out the price, and isn't kept.

If you book

First name, surname, email, phone and country of residence. We need them to register the booking, send your confirmation, get you into the apartment and look after you during the stay. The legal basis is performance of the contract (art. 6.1.b GDPR): without this data we can't book.

For the apartments in Italy (Folgarida, in Trentino) we are required by law to report guests' details to the police headquarters, through the Alloggiati Web portal, and to send statistical data to the Province. We can't avoid this and it doesn't require your consent (art. 6.1.c GDPR).

For the apartments abroad (Bayahibe, Dominican Republic) local rules apply, and they're different: there we use your data for the booking and the welcome, and pass it on only if and when the local authorities require it.

If you pay

Your card number never passes through our servers and we never see it. Payment is handled by Stripe, which gives us back only the card type (Visa, Mastercard…), the last four digits and the expiry date — enough to recognise the card when we take the balance before arrival, as agreed at the time of booking.

If you sign up for offers

Your email and, if you write it, your name. Only with your explicit consent (art. 6.1.a GDPR), which you can withdraw whenever you like by writing to [email protected]: we take you off the list, and that's that — we won't ask why.

If you request the Blu Lagun brochure

Name, email and phone, so we can send you the documentation and call you back. We use them for that and nothing else.

If you message us on WhatsApp

We keep the conversation and your number, so we can reply and remember what we talked about last time. Some replies are automatic: if you'd rather talk to a person, just ask and one of us takes over.

If you send us photos, voice notes or documents

What you send us in chat — a photo of a fault, a voice note, a document — is stored on our servers so that we can reply and have it to hand during your stay. After 90 days it deletes itself After 90 days it deletes itself, automatically, and no copy stays with us. Images may be read by an automated system (Anthropic, see below) so that we can understand what you have sent.

Don’t send us a photo of an identity document in chat unless we have asked you for it. When we need one for a formality — the entry forms for the Dominican Republic, for example — we tell you which details we need and how to get them to us, and we use them only for that.

Cookies: we don't use any

This site uses no profiling cookies, has no Google Analytics, no Facebook pixel, and doesn't follow you around other sites. That's why there's no window asking you to accept anything.

Two honest clarifications:

• On an apartment page we save a random code in your browser, so we don't count you twice among the people currently viewing. It disappears when you close the tab and isn't linked to you.
• On the payment page, Stripe sets its own cookies to spot fraud attempts. They're necessary for the payment to work.

The typefaces and images are on our own server too: opening this site you don't send your IP address to Google, as happens on many sites.

Who we share it with

Only with those we need in order to give you the holiday, and only for that:

• Smoobu (Germany) — the booking and calendar system
• Stripe (Ireland, with transfers to the USA covered by standard contractual clauses) — payments
• Meta (Ireland, same safeguards) — WhatsApp, if you write to us there
• Anthropic (United States, with standard contractual clauses) — the automated system that reads the messages and photos you send us in order to prepare the replies. It does not use them to train its models.
• Our hosting provider, where the site runs
• Public authorities, when the law requires it (police headquarters, tourism bodies, the Italian tax authority)

We don't sell your data to anyone and we don't hand it over for advertising. That isn't a marketing promise: it simply isn't our line of work.

How long we keep it

• Booking data and tax documents: 10 years, because the law requires it
• WhatsApp conversations: 24 months from the last message
• Photos, voice notes and documents sent in chat: 90 days, then they delete themselves
• Offer subscriptions: until you unsubscribe
• Brochure and information requests: 24 months, then deleted
• Count of who's currently viewing: 4 minutes, and only in the server's memory

What you can ask us for

The law gives you specific rights, and it costs us nothing to respect them. You can ask to:

• know what data we hold about you, and get a copy of it
• have it corrected, if something is wrong
• have it deleted, where we're not obliged to keep it
• restrict its use, or object to processing
• withdraw consent for offers, at any time
• take it elsewhere, in a format another system can read

Write to [email protected]. If you think we're getting it wrong and haven't listened, you can turn to the Italian Data Protection Authority.

If something changes

If we change this notice we update the date at the top. If the change matters — new data, or a new provider — we also write to everyone subscribed to the offers.