YOUR MOUNTAIN BIKE LODGE ABOVE FINALE LIGURE

BOOKING TERMS

Short, clear, fair. These terms apply to every stay you book with us, online or through an offer we send you.

Who you book with. Vertical Lodge SRL, Via Sant'Antonio Abate 3, 17020 Magliolo (SV), Italy · P.IVA 01944730090 · WhatsApp +39 379 3950391 · ciao@verticallodge.com

What you book. A stay in the Appartamento Grande or the Appartamento Piccolo for the nights you choose — online for 2 to 7 nights, any other stay through an offer from us. Prices are per person, for the whole stay, and include your NICOLAI S16 e-MTB, an e-scooter per double room with free charging, battery swaps and the ALL DAY TURBO™ app, keyless entry, the safe garage for bikes and tools, and one full charge of your electric car for the drive home.

When your booking is binding. When you continue to payment, we hold the apartment and your bikes for you while you pay; without a payment the hold ends by itself and nothing is booked. Your booking is binding — for you and for us — as soon as its first payment is in: the whole stay, the deposit or one rider's share. It is confirmed in full once everything is paid, and we email every rider when it is.

Paying. You pay online, through our payment provider Stripe (or another way, where we agree it with you): the whole stay at once, or a 25 % deposit now and the rest no later than 14 days before your stay starts. If you book 14 days or less before your stay, you pay the whole stay at once. If the rest has not arrived 14 days before your stay, we remind you; if it is still missing 7 days before, we may cancel the booking, and the deposit stays with us. One of you can pay for everyone, or every rider pays their own share with their own payment link.

Cancelling. You can cancel free of charge within 72 hours of booking, but no later than the day your stay starts. If you fall ill or have an accident, you can also cancel free of charge up to 5 days before your stay starts, with a medical certificate or other proof. In both cases you get back everything you paid, the same way you paid.
Any other cancellation: more than 14 days before your stay starts, we keep the deposit (25 % of the price) and refund everything else you paid; 14 days or less before your stay starts, the full price is due. If only some riders of a booking cancel, this applies to their shares.
We want to be fair: if we keep your deposit, you can put the full amount towards a future Vertical Lodge stay booked within 24 months of the cancelled arrival date. We send you a personal code for it; it is not paid out in cash and cannot be transferred.
To cancel, write to us on WhatsApp (+39 379 3950391) or to ciao@verticallodge.com.

Prices and invoices. All prices include VAT. You get an electronic invoice for every payment, so we need your billing details when you pay — Italian residents also their codice fiscale.

Tourist tax. The Comune di Magliolo charges a tourist tax (imposta di soggiorno). It is not included in our prices; we tell you the amount before your stay.

No 14-day right of withdrawal. A stay with us is accommodation and leisure services for fixed dates, so the 14-day right of withdrawal for contracts made online does not apply (art. 59(1)(n) Codice del Consumo). The free cancellation above is our own promise.

Riding with other riders — Appartamento Grande only. The Appartamento Grande is always rented as one whole apartment, under one contract — never room by room. If other riders ask for dates you have booked, we may introduce you to each other, but only if everyone agrees. If you all decide to stay together, we make one new booking for the whole group — one apartment, one contract, at the price per person for the size of the whole group. The riders of the first booking get back the difference between what they paid and their share of the new booking. Nothing changes for anyone unless all of you say yes — except for a rider who booked alone and agreed to it in advance (below). We only introduce other riders to a booking of 1 to 4 riders; a crew of 5 or 6 has the apartment to itself. Riding alone? You are welcome in the Appartamento Grande — if you agree, when you book, that your booking is cancelled and booked again for the whole group when more interested riders come for the same time (you keep your own double room, your price per person goes down, and you get the difference back). Otherwise one person would occupy an apartment for six on their own, which would neither make sense nor be possible at a reasonable price — and we don't want to shut out single riders. Doubts or questions? Write to us, your hosts.

Arrival and departure. There is no reception and no key handover: every rider gets a personal Nuki door code, which works from your arrival day to your departure day. The door codes, our guest area and PRO in our ALL DAY TURBO™ app come once the whole booking is paid. Check-in and check-out are very flexible — on departure day the e-MTB and the scooter stay yours for the whole day, and after the last ride there's a shower waiting. On arrival day you get the e-MTB or the e-scooter, whichever is free once we've checked with the other guests.

Rain days. If one or more rainy days make riding impossible — for example thunderstorms, or heavy rain with the trail network closed — we add one day to your next Vertical Lodge holiday, on the house.

Rental rules. Our rental rules (version 2026-10-14) are part of these terms: every rider accepts them with these terms, for themselves — under 18, with a parent's or guardian's OK. The essentials: you ride our e-bikes and e-scooters at your own risk and check the brakes before you ride; normal wear and tear is on us; for damage you cause you pay the parts, at the lowest price we can get them — or the full repair if we can't do it ourselves. E-scooters: 18 or older, a car, moped or motorbike licence, a helmet for everyone, paved roads only — the NIU app shows us where each scooter has been ridden, and damage from off-road riding is paid in full. We recommend your own accident insurance that includes mountain rescue — we don't provide one. And you should already ride blue and red trails and be used to a dropper post.

Something not right? Tell us — on WhatsApp during your stay, or by email to ciao@verticallodge.com.

Law and language. These terms are governed by Italian law; your rights as a consumer under the law of your country stay unaffected. They are written in English and translated into our other languages; if versions differ, the English version applies.

Version of 15 October 2026.

PRIVACY, IN PLAIN WORDS

The short version: we use your details to answer you and to run your booking and your stay, and we don't sell them. We count visits with our own counter, which sets no cookies. Our e-bikes and e-scooters have anti-theft trackers: we use them to protect our vehicles, not to follow where you ride — the details, and the one exception, are below.

What runs here today. No advertising, no ad networks, no social-media pixels, no analytics cookies. If we ever want more — an analytics or advertising cookie, for example — we'll update this text first and ask you about that cookie in our cookie banner: it will only be set if you say yes to it. A yes only ever covers what this text describes when you give it.

Cookies, and what your browser keeps. Say yes in our cookie banner and, once you've scrolled through all six chapters to our prices, we set a small cookie that remembers it, so the menu appears right away on your next visit, plus one that remembers your answer, so we don't ask again. Both stay on this site, do nothing else and last up to a year — Safari, and browsers on iPhones, may keep them for only a week. With a yes, your browser also keeps your choice of cm or ft in for the bike sizes, once you switch it. Larger text (the button with the two A's at the top) is kept whatever you answered — you chose it yourself. Those two settings stay on your device. Say no, and we keep only your no, in that answer cookie (and a larger text you switched on); everything still works. For this visit only — until the tab is closed — your browser also keeps whether the code of our opening offer is on. Signing in to the guest area and paying on our payment page bring cookies of their own — both explained below.

Changed your mind? Show the cookie banner again

Everything comes from our own server. Fonts, images, code — all served from our machine at Hetzner in Germany (EU), so loading this site today contacts no one else. That includes the satellite imagery in the Location section: it is Esri World Imagery, downloaded once and served from our server, so your browser doesn't talk to Esri.

We do count visits — with Umami, our own counter, on our own server at Hetzner in Germany (EU). No cookies, nothing stored on your device, no IP address stored, no tracking across sites, nothing shared with third parties. It records the page (address and title, without any code or personal link in the address), the site you came from, your language, browser, operating system, device type, screen size and rough location (country, region, city — from your IP address). A one-way code from your IP address and browser, new every month, recognises who comes back within the same month. Why: to know how many people visit and how they found us (legitimate interest).

And how far a booking gets. Umami also counts the steps of a booking — riders, dates, prices, apartment, bike sizes, your details, on to payment, paid (on our payment page too) — with nothing but the language, the dates chosen (arrival day, nights, how many weeks ahead), riders, apartment, season and cm or ft in. We also count whether you ask us for an offer, tap WhatsApp, open the date calendar (and whether a tapped day was taken), open the price calculator (and book from it), send a price or a stay to your crew (and whether a visit arrives through such a link), open “What's included?”, switch the language or turn on larger text, which sections of the page you see and for how long — and, on our payment page, whether you copy or share your riders' links. We also count whether the opening offer is shown, tapped or closed, and whether its code was applied there or typed in. If the page runs into an error, we count its technical message and where in the code it happened. Never your name, email, phone number or anything you type. Why: to see where a booking gets stuck (legitimate interest).

Server logs. Like every web server, ours briefly keeps technical logs (IP address, time, requested page) to keep the site secure and running. They're deleted automatically and never used for anything else.

When you contact or book with us (email or WhatsApp), we use your details to answer you and to run your booking and your stay — and we don't sell them. A few providers handle them on our behalf: our server at Hetzner in Germany (EU) runs this site and our booking system, our email runs on Google Workspace, and payments go through Stripe (see “Paying” below). If you choose WhatsApp, WhatsApp (Meta) processes your messages under its own privacy policy — your choice.

Paying. Our payment page (on guest.verticallodge.com) shows Stripe's payment form. What you type into it — your card or wallet and the billing address — goes straight to Stripe; we never see your card number. To save you typing, the form starts with the email address you gave us — and your mobile number, if you gave us one. With each payment Stripe gets the amount and a booking reference. Stripe sends us back the billing name, address and email, which we keep with our invoice records. If you haven't told us your name yet, we also use the first and last name from the billing details as the name of your booking. We use these billing details — your name and address, and for Italian residents also the codice fiscale you give us when you pay — to issue the electronic invoice that Italian tax law requires for every payment, and we pass them to our accountant and our invoicing service for that purpose. Stripe sets its own cookies on that page to keep payments safe and spot fraud, and handles payment data under its own privacy policy.

Asking us for an offer. For a stay without an online price, or for more than 6 riders, you can ask us for an offer. On WhatsApp: tapping the button opens WhatsApp (Meta) with your dates, riders, bike sizes and apartment typed in; WhatsApp receives that text when it opens, we get it only when you send it. By email: we keep your first name, email address, your request, your message if you write one, the page language and the time, send you one confirmation, and use it only to answer you — no newsletter. We delete the request on our server on its check-out day, or 6 months after you sent it if that comes first; our email conversation stays in our mailbox like any email. To stop abuse, our server counts requests per IP address in its memory only — never saved, gone when it restarts.

The waitlist. Until bookings open, you can join our waitlist on this page. We keep your first name, your email address, the language of the page, and when you signed up, when we emailed you the link and when you confirmed, on our server at Hetzner in Germany (EU). First we send you one email with a link to confirm that the address is really yours — so nobody can put someone else on the list. If you don't confirm within 7 days of that email, we delete your name and email address from the list. Once you have confirmed, we use them for exactly one thing: one email, in that language, the moment you can book. Right after it has gone out we delete your name and email address from the list. Both emails are sent from our mailbox at Google Workspace, and the sent emails stay in that mailbox like any email we send — the confirmation email too, even when nobody confirms it. No newsletter, and we never sell your details. Want off the list before that? One message to ciao@verticallodge.com and you're off. To stop abuse, our server counts signups per IP address in its memory only — never saved, gone when it restarts — and checks every signup automatically for signs of a script: a signup caught by a hidden form field or sent too fast is not stored at all; one whose name or address only looks like a script's is kept marked as a suspected bot, with the reason, gets no email and is deleted — by us, or automatically 7 days after it came in. For 30 days we also keep a one-way fingerprint of each address we sent a confirmation email to (never the address itself), so that no address gets more than three in that time. Legal basis: until you confirm, and for this abuse protection, our legitimate interest in emailing only people who asked for it (Art. 6(1)(f) GDPR); once you have confirmed, your consent (Art. 6(1)(a) GDPR).

Riding with other riders — Appartamento Grande only. When other riders ask for dates on which you have booked the Appartamento Grande, the booking page tells them that riders are already booked and what each rider would pay per night as one joint booking — a figure that depends on the size of the whole group. Never your name or your contact details. We may then tell you that other riders asked for your dates, and we introduce you to each other by email only if both of you agree: we share your first name, the languages you speak and the nights you share, your email address only once you have both said yes, and your phone number never. If you book together, whoever books for the group sees every rider's name, email and bike size, as in any booking. Legal basis: telling you about the request is part of looking after your booking (our legitimate interest, Art. 6(1)(f) GDPR); the introduction itself needs your consent (Art. 6(1)(a) GDPR) — say no at any time, or write to us. Requests left from our earlier “ride with more” form are deleted when you ask, or once their dates have passed.

Your guest area and your door code. Every rider of a fully paid booking can sign in to our guest area with the email address they were booked with. We email a link that works once, for 30 minutes, and keep only a hash of it (a fingerprint that cannot be turned back into the link), with the address, language and time of the request. Opening it sets one more cookie, on guest.verticallodge.com, that keeps you signed in on that device for 30 days or until you sign out — it is used for nothing else, and we keep only a hash of it too, with your address. Both are deleted about a week after they end. To stop abuse, our server counts requests per IP address and per email address in its memory only — never saved, gone when it restarts. Your door code is personal: we set one for each rider and stay, and apart from us only you see it, in your guest area, from your arrival day to your departure day.

Your ALL DAY TURBO licence. Every rider of a fully paid booking gets lifetime PRO in our ALL DAY TURBO app. Vertical Lodge SRL runs the app too, so this stays with us, on the app's own server (rented from Hetzner in Germany). Once the booking is fully paid, we send the app's server your email address (in lower case) and your stay dates — the arrival and departure day of each fully paid stay, so the app can unlock battery swaps for those days — and nothing else: no name, language or booking reference, no phone number, payment details or door code. After that we only tell it when your stay dates change (a stay moved or cancelled) and whether the licence still stands: it is withdrawn only if the booking is cancelled, or you are taken off it, before arrival — and even then only if no other fully paid booking still holds that address. One exception: if we correct a misspelt address, the licence moves to the corrected one, and the old address loses it. The app account itself is only created when the rider signs in there with that address. For a rider under 14, it is the parent's or guardian's address you gave us. A licence nobody claims is kept for good, so it still works years later. Ask us, and we delete it there too.

Our e-bikes and e-scooters have anti-theft trackers. So in principle we can see where each of them is at any time — also while you're riding it. We use this to protect our vehicles: to find one that has been stolen, not brought back or left somewhere, and to help you if you call us after a breakdown or an accident. We don't use it to watch where you ride. One exception: riding our e-scooters off-road is strictly forbidden, and if we see signs that a scooter was ridden off-road, we will look at where it was ridden (see our rental rules). Who handles the data: for the e-bikes, a specialised anti-theft tracking provider (we'd rather not name it — thieves read websites too), which keeps the positions on servers in the EU and says that any storage outside the EU follows the GDPR's rules; for the e-scooters, NIU, the scooters' own connected service, which receives their position and ride data — according to NIU's privacy policy, data may be transferred to China, and NIU says it applies the safeguards the GDPR requires for that. Ask us, and we'll tell you what we know about these safeguards. Neither provider names a fixed period for how long it keeps positions and routes. We pass a position on to the police after a theft, to rescue services in an emergency, and otherwise only where the law obliges us to. Legal basis: our legitimate interest in protecting our vehicles and enforcing our rental rules (Art. 6(1)(f) GDPR). You can object at any time — just write to us.

Your rights (GDPR): access, correction, deletion, restriction, portability and objection — and where you gave us your consent, you can withdraw it at any time. Write to us at ciao@verticallodge.com; one message is enough. You can also complain to a data protection authority — in Italy, the Garante per la protezione dei dati personali. Controller: Vertical Lodge SRL, Via Sant'Antonio Abate 3, 17020 Magliolo (SV), Italy. Last updated: 7 October 2026.

RENTAL RULES

Short and fair, we hope. They are part of our booking terms, and every rider accepts them personally — the booker for themselves only, every other rider on their own personal link before the stay. A rider under 18 accepts them together with a parent or guardian.

E-bikes. Riding is at your own risk. We do our best to keep every bike in top shape — but you check the brake pads every morning before you ride. Not sure how? Ask us, we'll gladly show you. After a crash or other damage you cause, we charge only the parts that have to be replaced, at the lowest price we can get them; normal wear and tear is on us. If we can't repair the bike ourselves, you pay the full cost of the repair.

E-scooters. You must be 18 or older and hold a valid licence for mopeds (AM), motorcycles (A1, A2 or A) or cars (B); with a licence from outside the EU you may also need an international driving permit. We provide the helmets, and everyone on the scooter must wear one. Before every ride you check the tyre pressure and the brake pads. After a crash or other damage you cause, the same rule as for the e-bikes applies. Paved roads only — off-road riding is not allowed. The NIU app shows us where each scooter has been ridden (see our privacy note). Damage from off-road riding is paid in full.

Trail level. Finale is a superb riding area, but its trails are natural, not built — there are no easy flow trails like in a bike park. You should already be a mountain biker before your stay and have already conquered blue and red trails (what's that?), and you should already ride a bike with a dropper post at home: getting used to one takes time, and it would be a shame to spend your holiday on that.

Insurance. Mountain biking is a risk sport. Vertical Lodge does not provide accident, rescue or health insurance for guests: we recommend your own accident insurance that covers mountain biking, including mountain rescue and transport, before you arrive.

None of this limits any rights you have by law.

Rental rules, version 2026-10-14. Questions? Just ask us before you book.