This is a courtesy translation provided for convenience. In case of any discrepancy, the Italian version prevails.

GDPR DPA

Data Processing Agreement · Last updated: May 2026

For Cuorio customers, the Data Processing Agreement (DPA) pursuant to Articles 28 and 29 of EU Regulation 2016/679 (GDPR) is available upon explicit request. The DPA governs the processing of your hotel guests’ personal data when it passes through the website we manage for you (e.g., enquiry form submissions, click-outs to the booking engine).

To request the DPA, write to team@cuorio.it stating the name of your property. We will send you the document as a signable PDF within 48 business hours.

Summary of sub-processors

Cuorio uses the following data sub-processors, all GDPR-compliant with servers in the EU/USA under standard contractual clauses:

Vercel Inc. — website hosting (EU servers)
FormSubmit — contact form handling
Google LLC — Google Ads, Google Hotel Ads, Google Analytics
Anthropic PBC — AI features of the free audit
Calendly — booking of exploratory calls (upon your explicit action)

For full details on purposes, duration, and technical and organizational security measures, please refer to the Privacy Policy or request the full DPA by email.