Privacy Policy
Privacy notice pursuant to Article 13 of Regulation (EU) 2016/679
Last updated: 23 September 2026
This notice describes how the personal data of users who visit www.villadeglioliviverona.com, request information or book a stay at Villa degli Olivi Verona is processed.
1. Data controller
The data controller is:
Marco Gasparini
Villa degli Olivi Verona
Via dei Garofani 8
37141 Verona – Italy
Email: booking@villadeglioliviverona.com
Villa degli Olivi Verona is operated on a private basis and does not provide hotel services.
2. Sources of personal data
Personal data is collected directly from the individual concerned or, where necessary to manage bookings and stays, received from the platforms and providers used, such as Lodgify, Airbnb, Booking.com, Vrbo and Ok Home.
3. Types of personal data processed
Browsing data
The IT systems used to operate the website may automatically collect certain information, such as IP address, device and browser type, pages visited, access date and time, and technical connection data.
This data is used to enable the website to function correctly, ensure its security and obtain aggregated statistical information about its use.
Data provided through the Contact form
When users submit the Contact form, the following information is collected:
first name and surname;
email address;
message content;
any additional information provided voluntarily.
Booking-related data
When users request or make a booking, the following information may be processed:
first name and surname;
contact details;
dates of stay;
number of guests and their details;
requests or requirements communicated by the guest;
booking and payment information;
data required to fulfil obligations under applicable rental and accommodation legislation.
Full payment card details are not collected directly by the data controller. They are handled by the payment service provider.
Data collected through cookies and analytics tools
With the user’s prior consent, the website may use analytics cookies and similar technologies to understand how the website is used and improve its content and features.
For further information, please refer to the Cookie Policy.
4. Purposes and legal bases of processing
Personal data is processed for the following purposes:
to enable browsing and the correct operation of the website, based on the data controller’s legitimate interest;
to ensure website security and prevent unlawful or fraudulent use;
to respond to enquiries submitted through the Contact form or by email, in order to take steps at the individual’s request before entering into a contract;
to manage availability enquiries, quotations, bookings, payments and stays, for the performance of a contract;
to carry out check-in and fulfil legal obligations concerning guest registration and reporting;
to fulfil administrative, accounting, tax and public security obligations;
to establish, exercise or defend the data controller’s legal rights;
to compile statistics on website usage, subject to prior consent whenever cookies or tools that are not strictly necessary are used.
Personal data is not used for commercial or promotional communications without specific consent.
No decisions are made solely on the basis of automated processing that produces legal effects concerning the user.
5. Provision of personal data
Providing the data marked as required in the forms is necessary to respond to an enquiry or manage a booking.
Failure to provide this data may make it impossible to supply the requested information or complete the booking.
Consent to analytics and non-essential cookies is optional and may be refused or withdrawn without preventing normal browsing of the website.
6. Processing methods and security
Personal data is processed using IT tools and, where necessary, manually. Appropriate technical and organisational measures are adopted to protect it against loss, destruction, unauthorised access, disclosure or unlawful use.
Access to personal data is restricted to those who genuinely need it for the purposes described in this notice.
Personal data is not disseminated or made publicly available, except where disclosure or reporting is expressly required by law.
7. Recipients and service providers
Personal data may be processed by or disclosed to the following categories of recipients, to the extent necessary:
Squarespace Ireland Limited, for hosting, website operation and management of the Contact form;
Google Ireland Limited, for Google Analytics, in accordance with the user’s preferences;
Codebay Solutions Limited – Lodgify, for checking availability and managing direct bookings;
Stripe, for secure payment processing;
Aruba S.p.A., for domain and email management;
OK Home, for online check-in, collection of guests’ details and identity documents, fulfilment of accommodation-related obligations and management of automated access to the property;
advisers and professionals who assist the data controller with administrative, tax or legal obligations;
public authorities and competent bodies, including the Questura (Police Headquarters), the Municipality of Verona and the Veneto Region, where disclosure is required by law.
Providers process personal data in accordance with their respective privacy notices and, when acting on behalf of the data controller, under specific agreements or instructions.
Privacy policies of the main providers:
Squarespace: https://www.squarespace.com/privacy
Lodgify: https://www.lodgify.com/privacy/
Stripe: https://stripe.com/privacy
8. Transfers outside the European Economic Area
Some technology providers may also process personal data in countries outside the European Economic Area.
In such cases, transfers take place in accordance with applicable legislation, on the basis of adequacy decisions, standard contractual clauses or other safeguards provided for under Regulation (EU) 2016/679.
9. Retention periods
Personal data is retained only for as long as necessary for the purposes for which it was collected. In particular:
enquiries received through the Contact form or by email are normally retained for a maximum of 12 months, unless they lead to a booking or a contractual relationship;
data relating to bookings, payments and administrative obligations is retained for the periods required by civil, tax and public security legislation;
data required to handle complaints or disputes may be retained until those matters have been resolved;
data collected through cookies is retained for the periods specified in the Cookie Policy or in the relevant providers’ settings.
10. Your rights
Where applicable, individuals may exercise the rights provided for under Articles 15–22 of Regulation (EU) 2016/679, including the right to:
obtain confirmation as to whether their personal data is being processed;
request access to their personal data;
request rectification or updates;
request erasure;
request restriction of processing;
object to processing;
receive their personal data in a structured, machine-readable format, where applicable;
withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to:
booking@villadeglioliviverona.com
Individuals may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) through www.garanteprivacy.it.
11. Cookies
The website uses technical cookies necessary for its operation and, with prior consent, analytics or third-party cookies.
Users may accept, reject or change their preferences through the banner and the “Cookie Preferences” control available on the website.
For further details, please refer to the Cookie Policy.
12. Children’s personal data
Booking requests must be made by adults.
Any personal data relating to children staying at the property is provided by a person with parental responsibility or another person legally responsible for them. It is processed solely to manage the stay and fulfil legal obligations.
13. Links to external websites
The website may contain links to external platforms or websites. The data controller does not control how these parties process personal data and encourages users to consult their respective privacy notices before providing any information.
14. Changes to this notice
This Privacy Policy may be amended to reflect regulatory or technical changes, or changes to the services used.
The updated version will be published on this page, showing the date of the latest update.