Privacy Policy

PRIVACY POLICY STATEMENT PURSUANT TO  ART. 13 of Regulation (EU) no. 2016/679

Dear Customer,

As required by art. of Regulation (EU) no. 2016/679 (hereinafter also abbreviated to “GDPR”), containing measures to protect natural persons and other parties with regard to the processing of personal data, this is to inform you that the personal data you contribute will be processed in accordance with the GDPR regulation and with non-disclosure obligations, as set forth in this privacy policy statement.

  1. Data Controller
    The data controller is Villa Vitali Srl with registered office in Bellagio, via Privata Belvedere 1.

  2. Purposes of the data processing.
    The data are processed for the sole purpose of the correct, complete provision of the service requested, and in particular for use of the accommodation / short term holiday letting service provided by Villa Vitali srl.

  3. Data processing procedures
    For the purposes of this privacy policy statement and the GDPR, processing shall refer (for example) to the collection, recording, organisation, storage, consultation, treatment, alteration, selection, retrieval, alignment, use, combination, freezing, disclosure, erasure and destruction of data.
    Data will be processed in automated and/or manual form, in accordance with the security provisions of art. 32 of GDPR 2016/679, by specifically designated parties and in compliance with art. 29 of GDPR 2016/679.
    Please note that, in accordance with the principles of lawfulness, limitation of scope and minimisation of data, pursuant to article 5 of GDPR 2016/679, further to your freely given explicit consent provided by signing this statement, your personal data will be stored for the period of time necessary for the achievement of the purposes for which they are collected and processed.

  4. Contribution of data.
    The contribution of personal data is strictly necessary for the performance of the activities referred to in point 1.

  5. Refusal to contribute data.
    Any refusal on the part of the data subject to contribute personal data in the circumstances referred to in point 3 shall render the provision of the services as per point 1 impossible.

  6. Disclosure of data.
    The data collected pursuant to this privacy policy statement will never be disseminated and will not be disclosed to third parties without your specific consent, except for any internal or external staff or associates and, in general, for all those parties their disclosure to whom is necessary for the correct pursuance of the purposes stated in point 1.

  7. Dissemination of data.
    Personal data are not disseminated.

  8. Transfer of data abroad.
    Personal data will not be transferred to European Union countries or third countries outside the European Union in the context of the purposes described in point 1.

  9. Rights of the data subject.
    The GDPR, and in particular articles 15 to 22 of Regulation (EU) no. 2016/679, grants the data subject the right to exercise specific rights, including the right to obtain confirmation as to whether or not the data controller holds his personal data and the disclosure of such data in intelligible form; the data subject is entitled to be informed concerning the origin of the data, the purposes of the processing and the methods used, the logic applied to the processing, and the identity of the data controller and the parties to whom the data may be disclosed;  the data is also entitled: to obtain the updating of the data, their portability, meaning to receive them from a data controller in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance and the rectification, completion and erasure of data; to object to the processing at any time, also in the case of processing for direct marketing purposes; to object to an automated decision-making process relating to natural persons, including profiling; to request access to the personal data from the data controller and their rectification or erasure or the restriction of the processing of data relating to him; or to object to the processing of the same; in addition to the right to portability, to the right to withdraw consent at any moment, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal; to lodge a claim with a supervisory authority; or to obtain the anonymisation or freezing of data processed in breach of the law.
    The data subject has the right to object to the processing on legitimate grounds.

  10. Procedure for exercise of rights under the GDPR
    You may exercise your rights by sending a written request to Villa Vitali srl, at the postal address of its registered office or at the email address This email address is being protected from spambots. You need JavaScript enabled to view it.