PRIVACY POLICY AND DATA PROCESSING INFORMATION
(Pursuant to EU Regulation 2016/679 – GDPR)
1. Data Controller
The Data Controller is Villa Margherita srl, with registered office at Via Mario Puccini 44, Quercianella (LI), Italy. For any matters concerning data protection, you may contact us at: [email protected].
2. Types of Data Collected
Villa Margherita collects and processes the following categories of data:
Identification and Contact Data: name, surname, place and date of birth, identity document details, residential address, telephone number, and email address.
Payment Data: credit/debit card details used as a guarantee or for the final settlement of the reservation.
Stay-related Data: arrival and departure dates, personal preferences and, only if voluntarily provided by the guest, sensitive data concerning health (e.g., food allergies or disabilities) to ensure a personalized and safe service.
3. Purposes and Legal Basis for Processing
Data are processed for the following purposes:
Performance of a Contract: to manage the reservation, the stay, and requested ancillary services (dining, events, etc.).
Compliance with Legal Obligations: for the communication of data to Public Security authorities (Alloggiati Web), management of the Tourist Tax, and for tax and accounting obligations.
Legitimate Interest: for the safety and security of individuals and property within the premises.
Marketing and Newsletter: subject to your explicit consent, for sending commercial or promotional communications regarding Villa Margherita’s activities.
4. Processing Methods and Security
Processing is carried out using both electronic and paper-based tools, adopting adequate technical and organizational security measures to prevent data loss, unlawful use, or unauthorized access.
5. Data Retention Period
Data related to booking and billing will be stored for 10 years, as required by Italian civil and tax regulations.
Data for Public Security purposes are deleted immediately after communication, unless otherwise required by law.
Data for marketing purposes will be stored until the data subject withdraws their consent.
6. Communication of Data to Third Parties
Your data will not be disclosed but may be communicated to:
Public Authorities: in compliance with legal obligations (e.g., the Livorno Police Headquarters/Questura).
External Processors: IT service providers, management software providers, tax consultants, or banking institutions, all appointed as Data Processors and bound by GDPR compliance.
7. Rights of the Data Subject
At any time, you may exercise your rights under Articles 15 et seq. of the GDPR:
Access to data and portability;
Rectification or erasure (right to be forgotten);
Restriction of or opposition to processing (including opting out of marketing).
Requests should be sent via email to [email protected]. If you believe that the processing violates your rights, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
8. Updates
This Privacy Policy is subject to updates. The latest valid version is the one published on the official Villa Margherita website.