Privacy statement

Introduction

Villa Grandi attaches great importance to the protection of your privacy and the security of your personal data. For this reason, this policy describes how we collect, use and protect your data in the context of holiday bookings via our website www.villa-grandi.com.

What personal data do we collect?

When booking a holiday through our website, we may collect the following personal data from you. We use this data exclusively for the purposes explained below.

1. Contact information, such as name, address, telephone number and email address.

2. Booking details, including arrival and departure dates, number of people, preferences and special requests.

3. Payment information, such as credit card details or bank account numbers (processed via a third party payment service provider).

4. Communication data, such as messages via email or the contact form on our website.

Purposes of the processing

We process your personal data for several reasons:

1. Booking processing – to confirm, manage and fulfil your booking.

2. Customer Service – to answer your questions and keep you informed about your booking.

3. Payment processing – your payments are processed correctly and securely via a secure payment provider.

4. Marketing – if you have given your consent, you will receive news, offers and promotions from Villa Grandi.

5. Legal obligations – to comply with tax and other legal requirements.

Legal basis for processing

The processing of your personal data is based on the following grounds:

1. Execution of an agreement, namely your booking at Villa Grandi.

2. Consent, for example to receive marketing emails.

3. Legal obligation, such as tax reporting.

4. Legitimate interest, for example to improve our services or prevent abuse.

Sharing your data

We never sell or rent your information. In some cases we share them with third parties, but always carefully and only if necessary:

1. Service providers, such as IT and payment partners, who are essential to our operations.

2. Governments or authorities, only if required to do so by law, for example by court order.

Security of your data

We take appropriate technical and organizational measures. This is how we protect your data against loss, theft or unauthorized access. Consider:

• Data encryption

• Secure servers

• Access restrictions

Retention period

We do not store your personal data for longer than necessary. The following guidelines apply for each type of data:

1. Booking data – up to a maximum of 7 years, partly due to tax legislation.

2. Marketing data – as long as you have not opted out. You can unsubscribe at any time via an unsubscribe link.

Uw Your rights

You have several rights with regard to your personal data:

• You may request access to your data.

• You may request access to your data.

• In certain cases you can request the deletion of your data.

• You may object to marketing.

• You can also request a restriction of processing.

• You have the right to data portability.

• Finally, you may withdraw previously given consent.

Would you like to exercise these rights? Please send an email to info@villa-grandi.com.