Last updated: 21 August 2026
This notice explains, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), how Tripcare processes personal data collected through www.tripcare.it and the forms on it. It is written from what the site actually does: the third parties listed below are the ones that genuinely receive data, with nothing added for form’s sake.
1. Data controller
The data controller is Tripcare S.r.l.s., registered office at Via del Masso, 36, 53036 Poggibonsi (SI), Italy — VAT 01560180521, REA SI – 213294, email info@tripcare.it, telephone +39 366 865 7341.
No Data Protection Officer has been appointed, as the statutory conditions do not apply. For any matter concerning personal data, write to info@tripcare.it.
2. Personal data we collect
We collect only what you give us and the technical data the site needs to work.
- Data submitted through the contact forms: full name, email address, telephone number, subject of the enquiry and the message text.
- Stay enquiry details: the property you are interested in, indicative dates and number of guests.
- Data submitted by property owners: property type, location and description.
- Photographs: the owners’ form allows up to 4 images (max 1.2 MB each) to be attached. Photographs are sent by email and are not stored on the website.
- Browsing data: IP address, browser and device type, pages visited and the date and time of the request, recorded automatically in server logs.
- Data collected through cookies and similar technologies: see section 7.
The forms include a hidden anti-spam field that is invisible to users and collects no personal data: it exists solely to discard automated submissions.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries about information, availability and quotes | Art. 6(1)(b) GDPR — pre-contractual steps taken at your request |
| Assessing a property and preparing a management proposal | Art. 6(1)(b) GDPR — pre-contractual steps |
| Providing property management and concierge services | Art. 6(1)(b) GDPR — performance of a contract |
| Sending the newsletter and marketing communications | Art. 6(1)(a) GDPR — consent, withdrawable at any time |
| Site security and prevention of abuse and automated submissions | Art. 6(1)(f) GDPR — legitimate interest in protecting the infrastructure |
| Support chat (HubSpot) | Art. 6(1)(a) GDPR — your consent |
| Analytics and ad-campaign measurement cookies (Google Analytics, Google Ads, Meta Pixel) | Art. 6(1)(a) GDPR — your consent |
| Accounting, tax and other statutory obligations | Art. 6(1)(c) GDPR — legal obligation |
Providing the data marked as required in the forms is necessary for us to act on your request: without it we cannot reply. Providing any other data is optional.
4. Who receives the data
Data is never sold or disclosed to third parties for marketing. It is handled by authorised Tripcare staff and by the following providers, acting as processors or as independent controllers:
| Provider | Role | Data involved |
|---|---|---|
| Vercel Inc. (United States) | Website hosting | Browsing data and server logs; form content in transit |
| Google Ireland Ltd. / Google LLC | Email service (SMTP) used to deliver enquiries | Form content, including any attached photographs |
| HubSpot, Inc. — EU data centre | Website chat, CRM and browsing analytics | Cookie identifiers, IP address, pages visited, chat conversation content |
| Google Ireland Ltd. | Google Analytics and Google Ads — browsing statistics and advertising conversion measurement | Cookie identifiers, IP address, pages visited, ad interactions |
| Meta Platforms Ireland Ltd. | Meta Pixel — measurement of our Facebook and Instagram advertising campaigns | Cookie identifiers, IP address, pages visited, ad interactions |
| OpenStreetMap Foundation | Map embedded on individual property pages | IP address and technical browser data, when the map loads |
| KrossBooking S.r.l. | Booking engine (booking.tripcare.it) | Only if you continue to the booking site, which has its own privacy notice |
Data may also be disclosed to accounting and legal advisers, and to competent authorities where the law requires it.
5. Transfers outside the European Economic Area
Some of the providers above are established in the United States or may process data outside the EEA. Such transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on the provider’s certification under the EU–US Data Privacy Framework.
Tripcare’s HubSpot account is hosted in the provider’s European data centre.
6. Retention periods
| Type of data | Retention |
|---|---|
| Enquiries not followed by a contract | 24 months from the last contact |
| Photographs sent by owners | Up to 24 months, unless earlier deletion is requested |
| Contractual, accounting and tax records | 10 years, under Art. 2220 of the Italian Civil Code |
| Newsletter subscription | Until consent is withdrawn |
| Server logs | A limited period, per the hosting provider’s settings |
| Cookies | See section 7 |
7. Cookies and similar technologies
The site uses technical cookies that are necessary for the pages to function; these do not require consent.
The site also loads the HubSpot script, which sets analytics cookies and powers the chat, and the Google (Google Analytics and Google Ads) and Meta (Meta Pixel) scripts, which measure site visits and the performance of our advertising campaigns on Google, Facebook and Instagram. None of these scripts loads until you give consent through the site’s banner, where you can accept or refuse everything or choose purpose by purpose (analytics, marketing, chat); that consent applies identically on every page, including advertising landing pages, and can be changed at any time from the “Cookie preferences” link in the footer. Your choice and its date are recorded in your browser. These cookies are not necessary and require your consent; you can block or delete cookies at any time through your browser settings, though blocking technical cookies may stop parts of the site from working.
The typefaces used on this site are hosted on our own servers: displaying them involves no connection to any third-party server. Property photographs are served from our own domain, even where the original source is the booking engine.
Individual property pages embed an OpenStreetMap map: loading it opens a connection to that service’s servers, which receive your IP address.
8. Your rights
You may exercise the following rights at any time, under Articles 15–22 GDPR:
- access to your personal data and to information about the processing;
- rectification of inaccurate data and completion of incomplete data;
- erasure of your data, in the cases provided by law;
- restriction of processing;
- portability of the data you provided, in a structured, machine-readable format;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Requests should be sent to info@tripcare.it. Tripcare replies within one month of receipt, extendable in the cases set out in Art. 12 GDPR.
If you believe your rights have been infringed, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the country where you live.
9. Security
The site is served exclusively over an encrypted connection (HTTPS). Access to data is limited to authorised staff and to the providers listed in section 4. No security measure can, however, guarantee absolute protection of data transmitted over the Internet.
10. Minors
The services offered through this site are not directed at people under 18 and we do not knowingly collect their data. If a parent or guardian believes a minor’s data has been collected, they may request its deletion by writing to info@tripcare.it.
11. Changes to this notice
This notice may be updated to reflect changes to the site, the services or applicable law. The version in force is always published on this page, together with the date it was last updated.