Privacy Policy – Hotel Villa Edy
Last updated: 2025-04-11
1. Data Controller
Hotel Villa Edy
Via Febo Sala 18, 22019 Tremezzina (CO), Italy
Email: privacy@villaedy.com
Phone: +39 392 041 0702
2. Types of Personal Data We Collect
- Name, surname, nationality, passport or ID number, date of birth
- Email address, phone number, home address
- Reservation details: stay dates, room preferences, requests
- Payment information
- Preferences and interests (if provided)
- Marketing preferences (with your consent)
- Health or dietary needs (only with explicit consent)
- Technical data (IP address, browser, cookies)
3. How We Collect Your Data
- Via our website booking/contact forms
- Phone or email communications
- Online travel platforms (e.g. Booking.com)
- Check-in forms at the hotel
- Cookies (see our Cookie Policy)
4. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Manage reservations and stays | Contract |
| Send guest data to authorities | Legal obligation |
| Process payments | Contract / Legal obligation |
| Send booking/service info | Legitimate interest |
| Send newsletters or promotions | Consent |
| Site usage statistics | Consent / Legitimate interest |
5. Who We Share Your Data With
- Public authorities (e.g. local police)
- Payment processors
- Booking platforms
- IT/cloud service providers
- Marketing partners (only with consent)
6. Data Transfers Outside the EU
If we transfer your data outside the EU, we ensure appropriate safeguards are in place (e.g. standard contractual clauses).
7. Data Retention
- Reservation data: up to 10 years
- Police registration data: deleted after legal use
- Marketing data: kept until consent withdrawn
- Cookie data: see Cookie Policy
8. Your Rights
You may request to:
- Access, correct, or delete your data
- Restrict or object to processing
- Withdraw consent
- Request data portability
- Lodge a complaint with the Italian DPA (Garante)
Contact: privacy@villaedy.com
9. Mandatory vs Optional Data
Some data (e.g., ID for check-in) is required by law. Refusal may prevent your stay. Other data is optional (e.g., marketing consent).
10. Security
We take appropriate measures to safeguard your data against loss, misuse, or unauthorized access.
11. Automated Decisions
We do not use your data for automated decision-making.
12. Policy Updates
We may update this privacy policy. The latest version is always available on our website and at reception.
13. Languages
This policy is available in Italian and English. Please contact us if you need it in another language.