Privacy Policy

This Privacy Policy explains how Villa Pontiletto ("we", "us", "our") collects, uses, and protects your personal data when you visit villapontiletto.com or make a booking enquiry. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

  • Via Regina 24, 22011 Griante (CO), Italy

  • Email: villapontiletto@gmail.com

For any privacy-related question, contact us at the email above.

2. What data we collect

Information you give us — when you submit a booking enquiry or contact us:

  • Full name

  • Email address

  • Phone number

  • Requested check-in and check-out dates

  • Number and type of guests

  • Any details in your message (special requests, occasion, etc.)

Information collected automatically — when you browse the site:

  • IP address and approximate location

  • Browser and device type

  • Pages visited and time spent

  • Data collected through cookies (see the Cookie Policy below)

3. How and why we use your data

Purpose Legal basis (GDPR Art. 6) Respond to your enquiry and provide availability and pricing Steps taken at your request prior to a contract Manage and confirm your booking and stay Performance of a contract Comply with legal duties, including reporting guest details to public authorities (e.g. Alloggiati Web / local Questura) and tax and tourist-tax obligations Legal obligation Keep records and handle any disputes Legitimate interest Send occasional updates or offers (only if you opt in) Consent Operate, secure, and improve the website Legitimate interest

You can withdraw consent for marketing at any time; it won't affect processing based on other legal bases.

4. Who we share it with

We do not sell your personal data. We share it only with:

  • Service providers acting on our behalf (processors): our website and form platform (Squarespace), our email provider (⟶ e.g. Google), and any booking or payment provider we use.

  • Public authorities: where legally required, such as guest registration with the police (Alloggiati Web) and tax authorities.

  • Professional advisers: accountant (commercialista) or legal advisers, where necessary.

5. International transfers

Some providers (e.g. Squarespace) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Enquiries that don't result in a booking: kept for up to e.g. 12 months, then deleted.

  • Booking and guest records: kept for as long as required by Italian tax and civil law (generally up to 10 years).

  • Marketing consent data: until you unsubscribe.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to erase your data ("right to be forgotten")

  • Restrict or object to our processing

  • Receive your data in a portable format

  • Withdraw consent at any time

To exercise any of these, email us at villapontiletto@gmail.com. We'll respond within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali — www.garanteprivacy.it, Piazza Venezia 11, 00187 Roma, Italy.

8. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No online transmission is ever completely secure, but we work to protect your information.

9. Children

The website and our services are intended for adults. We do not knowingly collect data from children without the involvement of a parent or guardian.

10. Changes to this policy

We may update this policy from time to time. The current version, with its date, is always available on this page.