Privacy policy

This policy explains how Roc Villa handles personal data when you visit rocvilla.com or send an enquiry. It is written to be read, not to hide behind legal language. If anything is unclear, write to info@rocvilla.com.

Who is the data controller

Roc Villa, Via Aurelia 1111, 57016 Castiglioncello (LI), Italy. Email: info@rocvilla.com. Telephone: +39 334 843 6300.

Data we collect

When you send an enquiry we collect the name, email address, optional telephone number, requested arrival and departure dates, number of guests and the message you write. We also record the moment you gave consent, the text of that consent and a one-way hash of your IP address, used only to prevent abuse.

Our web server keeps technical logs containing the IP address, the requested address, the time and the browser user agent. These logs are used for security and troubleshooting and are not used to profile visitors.

We do not run advertising or analytics trackers, we do not create behavioural profiles and we do not sell personal data.

Why we process it, and on what legal basis

• To answer your enquiry and prepare a possible stay: processing is necessary to take steps at your request before a contract (Article 6(1)(b) GDPR).
• To keep the site secure and prevent abuse: our legitimate interest in protecting the service (Article 6(1)(f) GDPR).
• To comply with accounting, tax and immigration obligations connected with a confirmed stay: legal obligation (Article 6(1)(c) GDPR).

We do not use your data for marketing unless you explicitly ask us to.

How long we keep it

Enquiries are kept for up to 24 months from the last exchange, then deleted. Server logs are kept for up to 30 days. Documents connected with a confirmed stay are kept for the period required by Italian law. Data needed only to defend a legal claim may be kept for the time necessary for that purpose.

Who may see it

Data is accessible to the people who manage the villa and to service providers that host the website, deliver email and protect the network, each bound by a data-processing agreement. The site is hosted on servers in the European Union and delivered through Cloudflare, which may process technical data outside the European Economic Area under the Standard Contractual Clauses. We do not share your enquiry with third parties for their own purposes.

Your rights

You may ask to access, correct, delete or restrict your personal data, object to processing based on legitimate interest, and receive your data in a portable format. Write to info@rocvilla.com; we reply within one month. You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

Security

The site is served over HTTPS. Access to enquiry data is limited and protected by authentication on the systems that store it. No system is perfectly secure, but we take the risk seriously and keep the surface as small as possible.

Children

The site is not directed at children under 14 and we do not knowingly collect their personal data.

Changes

If this policy changes in a way that matters, the date below changes and, where appropriate, we will tell people who have an open enquiry.