Privacy Policy

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended, and describes how we process the personal data of users who visit this website and contact us.

1. Data controller

Data controller: Villa Le Meridiane — [ragione sociale — da completare]
Registered office: Via Giuseppe Mazzini 12, 36053 Gambellara (VI), Veneto, Italia
VAT number: [partita IVA — da completare]
Phone: +39 348 756 2337
Email: [email del titolare — da completare]

2. Data we collect

• Data you provide: name, email, phone number, arrival and departure dates, number of guests and the content of your message, when you fill in the contact form or write to us by email, phone or WhatsApp.
• Browsing data: IP address, browser and device type, pages visited, date and time of the request. These technical data are recorded by the systems that deliver the website and are necessary for its operation and security.
• Cookies: see our Cookie Policy.

The website is not directed at children under 14 and we do not knowingly collect their data. We do not process special categories of data (Art. 9 GDPR) and carry out no automated decision-making or profiling.

3. Purposes and legal bases

• Answering enquiries about information and availability and managing the pre-contractual stage — legal basis: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
• Managing the booking and the stay, including the legal duty to report guest details to the Italian public security authorities (Alloggiati Web) and tax and tourist-tax obligations — legal bases: contract (Art. 6.1.b) and legal obligation (Art. 6.1.c).
• Ensuring the security, availability and proper maintenance of the website — legitimate interest of the controller (Art. 6.1.f).
• Any promotional communications: only with your free, specific and revocable consent (Art. 6.1.a).

Providing the data marked as mandatory in the form is necessary to answer your request; without them we cannot follow up.

4. Retention

• Enquiries not followed by a booking: 12 months.
• Accounting and tax records relating to stays: 10 years, as required by law.
• Data reported to the authorities for guest-registration duties: for the periods set by law.
• Technical website logs: up to 12 months.

5. Recipients and processors

Data may be processed by authorised staff and by suppliers appointed as processors under Art. 28 GDPR: our hosting and website infrastructure provider, our email provider, our tax and accounting advisor, any booking portals, and the messaging services used to reply (for example WhatsApp, if you choose that channel). Data are disclosed to public authorities where required by law. We never sell or share data with third parties for their own purposes.

6. Transfers outside the European Economic Area

Some technology providers may process data outside the EEA. In that case, transfers take place only to countries covered by a European Commission adequacy decision or on the basis of the Standard Contractual Clauses (Art. 46 GDPR), with supplementary measures where needed. You may ask us for a copy of the safeguards in place.

7. Your rights

You may exercise at any time the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent (without affecting the lawfulness of processing already carried out). Requests can be sent to the contacts in section 1 and are answered within one month.

If you believe the processing infringes data protection law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garante@gpdp.it) or bring proceedings before the courts.

8. Security

We apply technical and organisational measures appropriate to the risk: encrypted HTTPS connection, access limited to authorised persons, system updates and data minimisation.

9. Changes

This notice may be updated to reflect legal changes or changes to our services. The current version is always published on this page together with its last-updated date.