1) Data controller
Paola Duranti (“Controller”).
Privacy contact: villabriziola@gmail.com
2) Data we process
- Identification and contact data: your email address and any other details (e.g. name, phone number) you choose to include when you write to us.
- Message content: the information contained in the email you send us.
- Technical data: security logs and metadata generated by the website/hosting.
3) Purposes and legal bases
- Replying to your availability/quote request and providing pre-contractual information.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request). - Legal obligations related to bookings/accounting (if your request leads to a stay).
Legal basis: Art. 6(1)(c) GDPR. - Website protection and abuse prevention (security, logs).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
The website has no contact forms: your data is processed only if you decide to email us.
4) Retention
- Information requests: for as long as needed to handle the request, and no longer than 12 months after the last contact.
- Administrative documents (only if a stay is booked): for the periods required by applicable law.
- Technical logs: typically 30–90 days.
5) Providing your data
Providing your data is optional but necessary for us to reply. Without it, we cannot answer your request.
6) Recipients and service providers
Data may be processed on behalf of the Controller by providers of technical services:
- Hosting/CDN (Netlify) to deliver the website.
- Google tools (Gmail) used to receive and manage incoming emails.
- Technical/IT consultants only where strictly necessary and bound by data processing agreements or confidentiality clauses.
Data is never passed on to third parties for marketing purposes.
7) Transfers outside the EU
Some providers may have servers outside the European Economic Area (e.g. in the USA). In that case, transfers are based on Standard Contractual Clauses or other appropriate safeguards provided for by the GDPR.
8) Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction, objection and portability, and lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country of residence.
9) How to exercise your rights
Write to: villabriziola@gmail.com. We will reply without undue delay.
10) Cookies and similar technologies
For details, please see our Cookie Policy.
11) Minors
The website is not intended for minors and does not knowingly collect data from minors.
12) Updates
We may update this policy to reflect legal or technical changes. The current version is always published on this page. In case of discrepancies, the Italian version prevails.
Last updated: 1 October 2026