This notice describes how Villa Luce (the "Controller") processes personal data of users of the website villaluce.it, in accordance with EU Regulation 2016/679 (GDPR) and applicable Italian data protection law.
1. Data Controller
The Data Controller is Villa Luce, based in Imperia (IM), Italy. For any request regarding the processing of your personal data you may write to villaluce@villaluce.it.
2. Categories of data collected
We only collect the data strictly necessary to provide the requested services, in particular:
- Identification and contact data (first name, last name, email, phone) provided via the booking or contact form.
- Booking data (stay dates, number of guests, rooms, specific requests, notes).
- Payment data, handled directly by Stripe Payments Europe (no card data is stored on our servers).
- Navigation data (IP address, browser type, pages visited) collected through technical cookies and, with your consent, analytics cookies.
3. Purposes and legal basis
- Managing your booking and stay (Art. 6.1.b GDPR — performance of a contract).
- Administrative, tax and accounting obligations (Art. 6.1.c GDPR — legal obligation).
- Responding to information requests via the contact form (Art. 6.1.b GDPR).
- Site measurement and improvement via analytics or marketing cookies (Art. 6.1.a GDPR — consent, revocable at any time).
4. Processing methods
Data is processed by electronic means, with appropriate technical and organizational security measures to prevent loss, unauthorized access or unlawful use. Access is limited to authorized personnel.
5. Recipients and external processors
Data may be shared with third parties acting as Data Processors, including:
- Hosting and site infrastructure providers.
- Stripe Payments Europe Ltd., for processing payments.
- Resend / email providers for transactional communications.
- Tax and legal advisors, public authorities where required by law.
6. Transfers outside the EU
Any transfers to non-EU countries take place only where adequate safeguards under Articles 44 ff. GDPR apply (adequacy decisions, standard contractual clauses).
7. Your rights
You can exercise the following rights at any time by writing to villaluce@villaluce.it:
- Right of access to your data (Art. 15).
- Right to rectification (Art. 16).
- Right to erasure or "right to be forgotten" (Art. 17).
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20).
- Right to object and to withdraw consent (Art. 21).
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority.
8. Retention period
Data is retained for the time necessary for the purposes for which it was collected and in any case no longer than the terms required by applicable tax and civil law (generally 10 years for accounting records).
9. Changes
The Controller reserves the right to update this notice. Any changes will be published on this page along with the relevant update date.
Google Maps services
The reviews section uses Google Maps Platform to display ratings and user-published content. Use of this content is subject to the Google Privacy Policy and the Google Maps Additional Terms of Service.