Privacy notice – Where to next?

This notice covers "Where to next?", the automated assistant on dimoredepoca.it that lets you ask for travel ideas and information about our properties, experiences and gift boxes, and send a booking request. It supplements the general privacy policy of the website (in Italian).

Data controller

Hyper srl, owner of the Dimore d'Epoca brand, Contrà Riale 13/a, 36100 Vicenza, Italy. Contact: This email address is being protected from spambots. You need JavaScript enabled to view it..

What data we process

• The messages you write in the chat and the assistant's replies.
• Trip details that come up in the conversation (areas, dates, number of guests, preferences, properties and experiences you are interested in).
• Your email address, only if you choose to enter it to find the conversation again.
• If you send a booking request: first name, last name, email, phone number, dates and details of the stay, any notes.
• Technical data: the page where you use the chat, a session identifier and an encrypted fingerprint of your IP address, used only to prevent abuse.

Please do not enter sensitive data (for example health information) or payment details in the chat: they are not needed. Payment takes place only through PayPal, in its own window.

Why we process it and on what legal basis

• Answering your questions and suggesting properties and experiences: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Finding the conversation again by email: your request, which you can withdraw at any time.
• Forwarding the booking request to the property and handling the payment pre-authorisation: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c)).
• Improving the service and understanding which destinations and services people look for, through internal statistics: our legitimate interest (Art. 6(1)(f) GDPR). We do not use the chat for advertising profiling or to send you newsletters.

Automated assistant

Replies are generated by an artificial intelligence system and may contain inaccuracies: availability, prices and conditions apply only as shown in the availability check and in the property's confirmation. The assistant does not take decisions with legal effects on you: a booking is confirmed only by the property.

Who receives the data

• Anthropic PBC, provider of the artificial intelligence model that processes the messages, as data processor. Data may be processed in the United States, with the safeguards required by the GDPR (standard contractual clauses). Under the provider's commercial terms, content is not used to train its models.
• Supabase, provider of the infrastructure where conversations are stored (servers in the European Union, Frankfurt), as data processor.
• The chosen property, only if you send a booking request, to manage your stay.
• PayPal, as independent controller, for the pre-authorisation and any charge of the payment.

How long we keep it

Conversations and the memory linked to your email are deleted 24 months after last use. After the same period, statistics are kept only in a form that cannot be linked to you. The encrypted IP fingerprint is deleted after 7 days. Booking data are kept as long as accounting and tax obligations require.

Your rights

You can request access, rectification, erasure (including of the conversation alone or of the memory linked to your email), restriction and portability, and object to processing based on legitimate interest, by writing to This email address is being protected from spambots. You need JavaScript enabled to view it. and stating the email used in the chat. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.

Last updated: 22 September 2026.