Information updated on: 04.10.2026
Data controller
The controller of personal data processed through Livigno-Appartamenti.com is Vianello Mirco, Strada Statale 301 n. 1551 B, 23041 Livigno (SO), Italia.
Contact the controller: email vianello@elkaweb.it, tel. +39 338 714 3151.
General accommodation enquiry
The form is used to send a general enquiry for an apartment in Livigno. It is not a booking and does not necessarily have to concern a property viewed previously. The following data are requested: first and last name, email address, stay dates, number of adults and children, and message content.
The data are processed in memory only while the enquiry is received, prepared and currently distributed to authorised recipients belonging to the network. The system assigns the enquiry a random technical identifier used to correlate deliveries and for diagnostics.
Who receives the data
The system selects active accommodation providers and agencies belonging to the network that have a valid email address and are not excluded from distribution. Addresses are deduplicated and remain on the server.
Selected recipients receive the customer’s data so that they can reply directly to the email address provided. They may provide availability information, their own offers and information material relating to the enquiry received. Replies come from the individual properties or agencies, not from Livigno-Appartamenti.com. Recipients cannot see the addresses of the other parties to whom the enquiry was sent.
Livigno-Appartamenti.com does not retain the content of subsequent correspondence conducted directly between the customer and the recipient.
No enquiry archive
Once distribution is complete, Livigno-Appartamenti.com does not retain the first and last name, email address, stay dates, number of guests, message content or consent data on the server. There is no history from which a completed enquiry can be retrieved or resent.
Minimised technical logs contain only the random enquiry identifier, event time, delivery mode and transport, the numbers of selected recipients and successful or failed deliveries and, in the event of an error, its general technical code. They do not contain data entered in the form or recipients’ addresses. Logs are automatically deleted within 30 days at the latest.
To limit automated abuse, the server stores only an HMAC hash of the IP address and the time of the attempt. The IP address is not stored in plain form. Rate-limiting data are used for no more than one hour and are automatically deleted after that period.
Internal form statistics
Independently of Google Analytics, the service maintains two aggregated daily counters: the number of actual openings of the form page and the number of enquiries whose real distribution ended with at least one successful delivery. Test-mode deliveries do not increase the successful-enquiry counter.
To recognise repeat openings and obvious automated traffic, a technical opening record is also retained for no more than 30 days: time, irreversible HMAC hash of the IP address, hash of the existing session identifier, browser user agent, referrer without query parameters, browser-declared language and a technical probable-bot flag. The full IP address is not stored. These data do not contain information entered in the form and are not used to block traffic or for profiling.
Form refreshes in the same session and on the same day are visible in the short-term technical summary but do not increase the main opening counter again. Aggregated daily counters may be retained indefinitely because they do not allow an individual visit or enquiry to be reconstructed.
These technical statistics operate independently of consent to Google Analytics.
Necessary technologies
The service uses the technical session cookie livigno_appartamenti_session. It is required to protect the form, provide CSRF protection, manage messages, prevent accidental duplicate submissions and record that the form opening has already been counted in the current session and on the current day. The cookie is session-based, does not contain data entered in the form and is not used for advertising.
The analytics choice is stored locally in the browser as the preference la_consent_v1. This allows the service to remember the choice and lets it be changed later. These technologies are necessary to provide the requested function or remember the privacy setting.
Google Analytics 4
With the user’s consent, the service activates Google Analytics 4 with measurement ID G-BXKFBD2TB1. The tool helps understand how the website is used and may store or read analytics identifiers and transmit technical information about the visit to Google.
Google Analytics is not loaded before consent is given. Rejecting analytics does not restrict access to the website or form. Consent can be changed at any time using the “Privacy settings” button in the footer.
External services and social media
The page contains ordinary links to properties’ official websites, useful services in Livigno, Google Maps and Facebook, Instagram and YouTube profiles. We do not embed maps, videos or social widgets on the page. Data are transmitted to the external service only when the user independently opens its link; from that point, the privacy rules of the relevant provider apply.
User rights
Depending on the legal basis and circumstances of the processing, the data subject may have the rights provided by the GDPR, including the rights of access, rectification, erasure, restriction of processing, objection or withdrawal of consent, and the right to lodge a complaint with the competent supervisory authority.
For matters concerning these rights, the controller can be contacted at vianello@elkaweb.it or by telephone at +39 338 714 3151.