Privacy Policy
Last updated: October 22, 2026
1. Data Controller
This Privacy Policy explains how La Flotta Sagl processes the personal data of guests, customers, and visitors to Casa Gatti and the casagatti.ch website, in accordance with the Federal Act on Data Protection (nLPD) and, where applicable, the EU General Data Protection Regulation (GDPR).
La Flotta Sagl – Casa Gatti
Via Carlo Gatti 1
6721 Motto, Blenio Valley (TI)
Switzerland
IDI: CHE-372.908.437
Email: ciao@casagatti.ch
Phone / WhatsApp: +41 78 348 81 78
If you have any questions regarding data protection or wish to exercise your rights, please contact us at the email address listed above.
2. What Data We Process and for What Purposes
We process only the data necessary to provide the services you request.
| Activities | Data Processed | Purposes |
|---|---|---|
| Room Reservations | First name, last name, email, phone number, dates of stay, number of guests, special requests, total amount | Manage the reservation, communicate with you before and during your stay |
| Check-in and Guest Registration | Personal information, nationality, identification document, address, information on traveling companions, arrival time, and stay preferences | Comply with guest registration requirements and collect the tourist tax, issue the Ticino Ticket, and organize the welcome process |
| Dinners, Events, and Corporate Meetings | Name, contact information, date, number of guests, any allergies, food intolerances, or dietary preferences | Organize the service and prepare a menu that’s safe for you |
| Yoga, Retreats, and Wellness Treatments | Name, contact information, reservations; for certain treatments, health information that you voluntarily provide | To organize classes and perform treatments safely and appropriately |
| Payments | Amount, date, payment method, transaction ID (full card details are processed only by the payment provider) | Collect payments, issue invoices and receipts |
| Contact Information and Website Forms | Name, email, phone number, message content | Responding to your inquiries |
| Newsletter / Monthly Menu | Name, email, phone number (WhatsApp), consent | Send you the monthly menu and our updates |
| WhatsApp Messages | Phone number, name, messages | To respond to your requests and send you information about your reservation |
| Browsing the Site | IP address, device and browser data, pages visited, cookies | To operate the website, ensure its security, and—with your consent—analyze its usage |
We also process the data necessary for La Flotta Sagl’s accounting and tax obligations.
3. Legal Bases and Specific Data
We process your data on the following grounds:
- Performance of a contract or pre-contractual measures: reservations, stays, dinners, classes, treatments, and payments.
- Legal obligations: guest registration, tourist tax, accounting, and record-keeping.
- Consent: newsletters, analytics cookies, and health data; you may withdraw your consent at any time, without affecting processing that has already taken place.
- Legitimate interest: responding to inquiries, website and IT system security, and improving our services.
Sensitive personal data. Food allergies and intolerances, as well as health information you provide to us for yoga or treatments, are considered health data. We process this data only if you provide it to us, solely to safely prepare the service, and we do not use it for any other purposes.
4. Who We Share Your Data With
We do not sell your data. We share it only with vendors who help us provide our services—who are contractually obligated to use it only on our behalf—and with authorities when required by law.
| Recipient | Role | Location |
|---|---|---|
| Beds24 | Room Reservation and Management System | Germany (EU) |
| Booking.com and other websites | Reservations made through the portal (data controllers for their own data) | Netherlands (EU) |
| Payrexx (with TWINT, Visa, Mastercard, Apple Pay, Google Pay) | Online and in-store payments | Switzerland |
| Google (Workspace, Analytics, Tag Manager, Maps, Fonts) | Email, documents, newsletters, website statistics, maps, and fonts | Ireland (EU) / USA |
| Odoo | Business Management: Customers, Invoices, Accounting, Check-in | Belgium (EU) |
| Make | Automate workflows between our systems | USA |
| Webempresa | Website Hosting | Spain (EU) |
| Trustindex | Displaying Reviews on the Website | EU |
| Complianz | Cookie Consent Management | Netherlands (EU) |
| WhatsApp (Meta) | Messaging with guests | Ireland (EU) / USA |
| Fiduciary | Accounting and Tax Compliance | Switzerland |
| Cantonal Police, Municipality, and Tourism Board | Guest registration, tourist tax, Ticino Ticket | Switzerland |
5. Transfer of Data Abroad
Some providers are based in or have servers located in the European Union or the United States. The EU guarantees a level of protection recognized as adequate by Switzerland. For the United States, we rely on providers certified under the Swiss-U.S. Data Privacy Framework or, failing that, on standard contractual clauses recognized by the IFPDT.
6. How Long We Retain Data
We retain data only for as long as necessary to fulfill the purpose or as required by law.
| Data | Duration |
|---|---|
| Invoices, Payments, and Accounting Documents | 10 years (Art. 958f CO) |
| Guest Registration | For the duration specified by cantonal law |
| Reservations and Stay History | Up to 10 years, for accounting purposes |
| Health and Allergy Information | Until the end of the service, unless you consent to their retention for future visits |
| Requests via forms, email, and WhatsApp | Up to 2 years from the last contact |
| Newsletter | Until you unsubscribe |
| Browsing Data and Analytics | According to the Cookie Policy (up to 14 months for Google Analytics) |
7. Cookies and Website Statistics
The site uses technical cookies, which are necessary for its operation, and—only with your consent—analytics cookies (Google Analytics via Google Tag Manager and Site Kit) and cookies from third-party services such as maps and reviews. You can change your preferences at any time via the cookie banner. Full details are available in our Cookie Policy.
8. Security
We protect data using appropriate technical and organizational measures: encrypted connections (HTTPS), access to systems restricted to authorized personnel and protected by two-factor authentication, regular backups, and carefully selected vendors. Payment card data is never stored on our systems.
9. Your Rights
You may contact us at any time by emailing ciao@casagatti.ch to:
- information about the data we process about you and a copy of it;
- correction of inaccurate data;
- the erasure or restriction of processing, subject to any legal retention obligations;
- receipt of your data in a commonly used electronic format;
- withdrawal of consent and objection to processing based on our legitimate interest.
We typically respond within 30 days. We may ask you to confirm your identity.
If you believe your data is being processed in a manner that does not comply with the law, you may contactthe Federal Data Protection and Information Commissioner (FDPIC). If you reside in the EU, you may also contact the supervisory authority in your country.
10. Changes
We may update this Privacy Policy when our services or the law change. The current version is always the one published on casagatti.ch, with the date of the last update.