Privacy Policy

Villa Ginevra respects the privacy of its guests and website users. This notice describes which personal data we collect, for which purposes we process it, and which rights you can exercise. We handle your data carefully, limiting collection to what is needed to reply to your requests and manage your stay.

The data controller is Villa Ginevra, located at Corso Italia 58, 73014 Gallipoli (LE), Puglia. For any request relating to your personal data you can contact us by email at ele1602@hotmail.it or at +39 347 738 3260.

We collect only the data needed to handle your request and your stay:

• Contact data: first name, last name, email, phone number.
• Stay data: check-in and check-out dates, number of guests, selected room, notes and special requests.
• Communication data: content of messages sent through the booking form, email or WhatsApp.
• Minimal technical data: IP address and browser information, temporarily retained in the server security logs.

Your personal data is processed exclusively for the following purposes:

• Responding to your booking request and confirming availability.
• Managing your stay, including check-in, check-out and service communications.
• Fulfilling legal obligations, including reporting guest data to the Italian Police (Alloggiati Web) as required by Italian law.
• Invoicing and accounting/tax obligations.

The legal basis for processing is the performance of a contract you are party to (art. 6(b) GDPR), compliance with legal obligations (art. 6(c) GDPR) and, limited to the contact form, your explicit consent (art. 6(a) GDPR).

We keep booking and stay data for as long as required to comply with tax and legal obligations (typically 10 years for accounting records). Messages received through the contact form are kept for a maximum of 24 months, unless you decide to book.

Your data is not sold or transferred to third parties for commercial purposes. It may be shared only with: public authorities when required by law (e.g. Alloggiati Web), technical providers acting on our behalf as data processors (email provider, hosting), and only to the extent necessary for the service.

Under arts. 15-22 of the GDPR you have the right to:

• Access your personal data and request a copy.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, within legal limits.
• Request restriction of processing or object to it.
• Obtain data portability in a structured format.
• Withdraw your consent at any time.
• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights write to ele1602@hotmail.it. We will reply within 30 days.

The site only uses technical and third-party cookies (Google Maps) for the proper functioning of the pages. For more details see our Cookie Policy.

We may update this notice to reflect regulatory or organisational changes. The date at the top of the page indicates the latest revision.