Privacy policy
This policy explains what data we collect through the website, why, for how long and what your rights are, under Articles 13 and 14 of EU Regulation 2016/679 (GDPR).
Draft: owner details to be completed and the text to be reviewed before publication.
Data controller
[Nome e cognome / ragione sociale del titolare], [Indirizzo completo]. Email: info@rivieravilla.it.
What data we collect
- Booking and contact requests
- Name, email, phone (optional), dates of stay, number of guests, pets and any message.
- Browsing data
- The servers hosting the site record technical data such as IP address, browser and pages visited, which are needed for the site to work and stay secure.
- After booking
- At check-in, Italian law requires us to collect guests’ identity document details and report them to the police (Alloggiati Web portal) and, anonymously, to ISTAT.
Why we process it
- To answer your request and manage the booking
- Legal basis: pre-contractual measures and performance of the contract (Art. 6(1)(b) GDPR).
- To meet legal obligations
- Police registration, tax and accounting obligations (Art. 6(1)(c) GDPR).
- Site security
- Preventing abuse and spam (legitimate interest, Art. 6(1)(f) GDPR).
How long we keep it
Requests that do not become a booking are deleted within 12 months. Booking data is kept for the period required by tax law (10 years). Browsing data is kept for a few days.
Who receives it
Data is processed by us and by the providers that help us run the site, appointed as data processors: Vercel Inc. (hosting), Supabase Inc. (database, servers in the European Union) and Resend Inc. (email delivery). Some providers are based in the United States: transfers rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
If you choose to display the map, it is loaded from OpenStreetMap, which receives your IP address. We never sell or share your data with third parties for marketing.
Your rights
You can ask at any time to access, correct, delete, restrict, object to or receive a portable copy of your data by writing to info@rivieravilla.it. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or the authority in your country.