This is a courtesy translation provided for convenience. In case of any discrepancy, the Italian version prevails.
← Back to homePrivacy Policy
Last updated: May 2026
1. Data controller
The data controller is Cuorio, based in Milan, Italy. Contact email: team@cuorio.it. The VAT number (P.IVA) and full company name will be updated on this page once the company incorporation is complete.
2. Data we collect
When you fill in the contact form on our website we collect: first and last name, name of your accommodation property, email address, phone number, and any notes you choose to leave us. When you use the free audit we collect the website URL you provide and (upon your explicit action) your email address in order to send you the report.
3. Purposes
We use your data exclusively to: respond to your contact request, assess the suitability of our services for your hotel, and send you the audit report you requested. We do not share your email or phone number with third parties and we do not use them for marketing purposes other than your explicit request.
4. Legal basis
Processing is based on the explicit consent you give by filling in the form (Art. 6(1)(a) GDPR) and on the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
5. Retention
Contact data is retained for the time necessary to handle your request and, if you become a customer, for the duration of the contractual relationship plus the statutory periods for tax and administrative purposes. If you do not become a customer, we delete the data within 24 months of the last contact, unless you request earlier deletion.
6. Your rights
You have the right to request from us at any time: access to your data, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, write to team@cuorio.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).
7. Third-party tools
We use: FormSubmit (to receive contact forms, servers in the EU), Calendly (if you choose to book a call directly), Vercel (for website hosting), Anthropic and Google (for the technical features of the free audit when you use it). All providers are GDPR-compliant.