Privacy and cookies.
In short: we keep only what we need to reply to you and to welcome you. The website sets no cookies, does not run analytics on your visit and shows no advertising.
Who is responsible
The data controller is the website publisher (see the legal notice). For any question about your data: staff@casa56.com.
What we receive, and why
- The website forms (contact, stay request, gift voucher, event): name, email, phone number, dates, number of people and your message. They reach us by email and are used to reply to you and to prepare your booking or your order, at your request (Article 6(1)(b) GDPR).
- Table bookings are made in the Resmio booking calendar, which opens within the page: Resmio receives the booking details on behalf of Casa 56.
- Room bookings are made in the hotel's booking engine (Xenion), which receives the details of your stay.
- WhatsApp: if you message us, your number and your messages go through WhatsApp, under its own rules. We use them only to reply to you.
- Invoices are kept to meet our accounting obligations (Article 6(1)(c) GDPR).
Your data is never sold or used for advertising.
Who else sees your data
- Netlify, Inc. (United States) hosts the website and receives the messages sent through the forms, along with the IP address and browser used to send them, which help filter out abusive submissions. This transfer is governed by the Data Privacy Framework between the European Union and the United States, in which Netlify participates.
- Resend, Inc. (United States) forwards the messages sent through the forms to us by email. Emails are sent from Ireland; the data is stored in the United States. This transfer is governed by the European Commission's standard contractual clauses and by the Data Privacy Framework between the European Union and the United States.
- resmio GmbH (Nuremberg, Germany) manages the table booking calendar.
- Xenion (Italy) manages the hotel's booking engine.
- WhatsApp Ireland Limited (Dublin, Ireland) carries the messages you send us on WhatsApp.
How long
Messages received through the forms are deleted 12 months after our last exchange, unless they led to a booking or an order. Invoices are kept for the period required by accounting law.
Your rights
You can ask to see your data, to correct it, to erase it, to restrict its use, to object to its use or to retrieve it. Write to us at staff@casa56.com: we reply within one month. If you are not satisfied with our reply, you can refer the matter to the Luxembourg data protection authority: the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.
Cookies
The website sets no cookies: no audience measurement, no advertising, no embedded social media buttons. Fonts and videos are served by the website itself, without going through Google or any other platform.
During your visit only, your browser remembers the suggestions you have already seen or closed (“session storage”), so that they are not shown to you again. Everything is cleared when you close the tab.
When you open the table booking calendar, the page loads Resmio's calendar. Resmio uses its own cookies and the Google Analytics measurement tool there, under its own responsibility. Prefer to avoid it? Book by phone or on WhatsApp. The links to Instagram, Facebook, WhatsApp, Google Maps and the hotel's booking engine open those services, with their own rules.
Last updated: 18 October 2026.