1. Data Controller
Il Girasole di Vitangeli Marco
Contrada San Pietro 38 – 63061 Massignano (AP), Italy
VAT number: IT02455570446
Phone / WhatsApp: +39 0735 72192
E-mail: [email protected]
2. Categories of personal data collected
2.1 Data provided directly by you
- Identity data: first name, last name, date of birth, nationality, identity document / passport type and number
- Contact data: e-mail address, phone number, home address
- Stay-related data: arrival/departure dates, number of guests, accommodation type, special requirements
- Payment data: deposit processing information (managed by Passepartout; we do not store your credit card details)
- Free-form communications: e-mails, WhatsApp messages, contact form submissions
2.2 Data collected automatically (website browsing)
- IP address and device network data
- Browser type, operating system, screen resolution
- Pages visited, navigation path, access times
- Session data (via technical cookies)
2.3 Third-party data communicated by you
If you share personal data about other members of your party, we will process it solely for booking purposes. You confirm that you are authorised to share such data and that you have informed those individuals about this Privacy Notice.
3. Purposes and legal bases for processing
| Purpose | Legal basis (Art. 6 GDPR) | Mandatory? |
|---|---|---|
| Booking and stay management | Art. 6(1)(b) — performance of a contract | Required to make a booking |
| Fiscal and accounting obligations (invoicing) | Art. 6(1)(c) — legal obligation | Required by law |
| Guest registration with Italian Police (Schedina Alloggiati) | Art. 6(1)(c) — legal obligation (Art. 109 T.U.L.P.S.) | Required by law |
| Handling complaints and disputes | Art. 6(1)(b)/(f) — contract / legitimate interests | Required if dispute arises |
| Marketing communications (newsletter, offers) — with consent only | Art. 6(1)(a) — consent | Optional; revocable at any time |
| Website analytics (anonymised, Google Analytics) | Art. 6(1)(f) — legitimate interests | Optional; opt-out available |
4. Retention periods
| Data category | Retention period |
|---|---|
| Contractual data (booking, stay) | 10 years from end of contractual relationship |
| Fiscal documents (invoices, receipts) | 10 years (Italian tax legislation) |
| Police registration data (Schedina PS) | 5 years (Ministerial Decree of 7 January 2013, No. 15) |
| Navigation logs and technical data | Maximum 12 months |
| Marketing data (newsletter) | Until consent is withdrawn |
| E-mail/WhatsApp correspondence | 3 years from end of relationship |
5. Recipients and categories of recipients
5.1 Legally required disclosures
- Italian Police Authority (Questura / Commissariato) — via the Alloggiati Web portal (Art. 109 T.U.L.P.S.)
- Italian Revenue Agency and other tax authorities, where required by law
5.2 Data processors (Art. 28 GDPR)
- Passepartout S.p.A. (San Marino) — online booking engine provider
- Google LLC (USA, Standard Contractual Clauses) — Google Analytics and Google Maps
- Hosting provider — web hosting service
- Tax consultant / accountant — fiscal obligations
5.3 Social media platforms (independent data controllers)
When you interact with our social media pages (Facebook/Meta, Instagram), your data is processed by Meta Platforms Ireland Ltd. as an independent controller under their own privacy policies.
We do not sell, assign or disclose data to third parties for purposes other than those described above.
6. International data transfers
Some recipients (particularly Google LLC) are based in the United States. Transfers are made on the basis of Standard Contractual Clauses (EU Commission implementing decision 2021/914/EU) and, where applicable, the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).
7. Your rights
Under Arts. 15–22 GDPR, you have the right to:
- Access (Art. 15): obtain confirmation of processing and access to your data
- Rectification (Art. 16): obtain correction of inaccurate or incomplete data
- Erasure / right to be forgotten (Art. 17): obtain deletion of data, subject to legal obligations
- Restriction of processing (Art. 18): obtain restriction in certain circumstances
- Data portability (Art. 20): receive your data in a structured, machine-readable format
- Objection (Art. 21): object to processing for legitimate interests or direct marketing
- Withdrawal of consent (Art. 7(3)): withdraw consent at any time without affecting prior lawful processing
To exercise your rights, contact us at:
E-mail: [email protected]
WhatsApp: +39 0735 72192
Post: Il Girasole di Vitangeli Marco, Contrada San Pietro 38, 63061 Massignano (AP), Italy
We will respond within 30 days of receiving your request.
8. Right to lodge a complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):
Website: www.garanteprivacy.it
E-mail: [email protected]
Address: Piazza Venezia 11 – 00187 Rome, Italy
You may also complain to the supervisory authority in your EU Member State of habitual residence, workplace, or where an alleged infringement took place.
9. Cookie Policy
Strictly necessary cookies (technical)
Used to ensure correct website functioning (session management, language preferences, booking cart). No consent required.
Analytics cookies (Google Analytics)
Used to analyse traffic in anonymised form. Consent required. Opt-out: tools.google.com/dlpage/gaoptout.
Profiling / marketing cookies
Currently not in use. Prior consent will be requested if activated in the future.
Cookie consent is managed via the banner displayed on your first visit. Preferences can be updated via the “Cookie settings” link in the footer.
10. Changes to this Notice
We reserve the right to update this Privacy Notice to reflect changes in law or website features. The most up-to-date version is always available on this page.
Il Girasole di Vitangeli Marco — Massignano (AP) — VAT IT02455570446
Privacy Notice last updated: March 2026 — compliant with EU Regulation 2016/679 (GDPR)