Privacy & Cookie Policy

What data we process

• Contact data: first name, last name, email, phone number, messages entered in the form, availability requests and preferences on dates and guest count.
• Browsing data: IP addresses, user agent and visited paths (technical logs and security controls).
• Consent records: email, optional full name, purpose, policy version, status (grant or withdrawal), registration or withdrawal timestamp and notes.
• Technical cookies: required for site operation; we do not use profiling cookies. Any third-party technical cookies may derive from embedded services such as reCAPTCHA or WhatsApp.

Purposes and legal bases

• To answer requests sent through the form or by email and manage the requested booking. Legal basis: performance of pre-contractual and contractual measures (Art. 6.1.b GDPR).
• Operational communications related to the requested stay. Legal basis: contract or legitimate interest (Art. 6.1.f GDPR) to provide information reasonably expected by the requester.
• Legal obligations, including fiscal, anti-spam and security requirements. Legal basis: legal obligation (Art. 6.1.c GDPR).
• Express consent for non-essential informational follow-up and to retain proof of consent. Legal basis: consent (Art. 6.1.a GDPR).
• Security and abuse prevention through technical logs and anti-bot tools such as Google reCAPTCHA. Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).

Data retention

• Contacts and requests: up to 24 months from the last interaction or for the time needed to manage the request or contract.
• Technical security logs: up to 6 months, unless longer retention is required for investigations.
• Billing and legal obligations: up to 10 years where required by law.
• Consent grants and withdrawals: we keep proof and timestamps for as long as necessary to demonstrate lawful processing or until deletion is requested where applicable.

Cookies and similar technologies

• We only use technical cookies that are necessary for operation and security.
• Third-party services, such as Google reCAPTCHA for anti-bot protection or opening WhatsApp, may place technical or security cookies. Their processing may involve providers outside the EU under appropriate safeguards such as standard contractual clauses.
• You may manage or block cookies through your browser settings; blocking technical cookies may limit some features of the website.

Recipients and transfers

• Hosting, application maintenance, email and communication service providers strictly connected to the requested service.
• Data are not publicly disclosed. Any extra-EU transfer takes place with appropriate safeguards where required by the third-party service used.

Your rights

To exercise your rights, contact info@villettacaporama.it and specify the subject of your request and, if possible, the email address used in previous communications. We will reply within the timeframes required by the GDPR.

• Access to your data and obtaining a copy.
• Rectification or completion of incomplete data.
• Erasure where applicable.
• Restriction of processing.
• Portability of data provided, where technically feasible.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time, effective from that moment onward.
• Complaint to the competent data protection authority.

Consent management

We register consent with date, time, purpose and policy version. You may update or withdraw your consent at any time; withdrawal does not affect the lawfulness of processing already carried out. We retain proof of withdrawal to document your choice.

Consent is required for non-essential informational communications and follow-up related to availability or ancillary stay services.

Where processing is necessary to answer your request or comply with the law, the legal basis remains the contract or the law, without the need for consent.

Register or withdraw consent

Use the forms below to register a new consent or withdraw it. You will receive on-screen confirmation and the event will be stored with a timestamp in our dedicated register.

Policy updates

This notice may be updated to reflect legal compliance requirements or service changes. The current version is identified by the number shown in the consent forms. Previous versions are available on request.