Privacy Policy

1. Data controller

The data controller is Villa Urbani Apartments, reachable at alice@villaurbani.it and laura@villaurbani.it, and by phone at +39 333 504 7307 and +39 333 414 3825.

2. Data we collect

Through the booking request forms on this site we collect: first and last name, email address, phone number (optional), arrival and departure dates, number of guests and any special requests you freely include in the message.

We do not collect payment details: bookings are confirmed personally by email or phone.

3. Purpose and legal basis

The data you provide is used exclusively to handle your booking request: checking availability, contacting you back and organising your stay.

The legal basis is the performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).

4. Data retention

Data is kept for the time needed to handle the request and the stay, and in any case no longer than 24 months from the last contact, unless different legal obligations apply.

5. Recipients of the data

Booking requests are shared with the owners of the property concerned (Alice Pinto and Laura Urbani) and processed with the help of technical providers that keep the site running and deliver emails, in compliance with the GDPR.

Data is never sold or disclosed to third parties for marketing purposes.

6. Your rights

As a data subject you may exercise at any time the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction, portability and objection.

To exercise your rights write to alice@villaurbani.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Cookies

For information about the cookies used by this site, please read our Cookie Policy.

8. Statistics, Google services and transfers

With your consent (Art. 6(1)(a) GDPR) we collect visit statistics: page, referring site, device, date and a daily pseudonymous identifier derived from IP and browser. The IP is processed to produce this identifier but is not saved as a field in the statistics. These data support aggregate analysis and reports to site managers; they are not absolutely anonymous. Automatic deletion of statistical records is not currently configured: contact the controller for information or erasure requests.

Google Maps loads only with consent; Google Fonts loads typefaces and sends connection data to Google to display the site (legitimate interest, Art. 6(1)(f) GDPR). Search Console provides aggregate search data to the manager; verification tags do not add visitor tracking.

Google and technical providers may process data outside the European Economic Area. Applicable safeguards depend on the provider and may include adequacy decisions or standard contractual clauses. See https://policies.google.com/privacy for Google’s details, retention periods and rights. Withdraw optional choices through Cookie preferences in the footer.