Privacy notice
Last updated: 12/10/2026. The Italian version is the legally binding one.
1. Data controller
Aneta Berlinska, operator of Villa Victoria B&B (Bed and Breakfast), Traversa Sant'Andrea, 87045 Tessano di Dipignano (CS), Italia. Email: info@villavictoria-italy.com · Phone: +39 393 914 2103. CIN IT078049C1PHJHO9UH · CIR 078049-BBF-00001.
2. Data we process
- Enquiries and messages: name, email, phone, dates, number of guests and message sent through the website forms, by email or WhatsApp.
- Bookings: guest and stay details; payment data handled by the payment provider (we never see your full card number).
- Guest registration: identity document details required by law on arrival.
- Browsing data: IP address and technical data logged by the servers hosting the site, for security and operation.
- Statistics: only with your consent, usage data collected with Google Analytics (see the cookie policy).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to enquiries and quotes | Pre-contractual steps at your request (Art. 6(1)(b)) |
| Managing the booking and stay | Performance of a contract (Art. 6(1)(b)) |
| Reporting guest details to the police (Art. 109 TULPS), statistical, tax and accounting duties | Legal obligation (Art. 6(1)(c)) |
| Website security and operation | Legitimate interest (Art. 6(1)(f)) |
| Website usage statistics | Consent (Art. 6(1)(a)), which you can withdraw at any time |
4. Who we share data with
Data is processed by us and by providers acting as processors, only for the purposes above:
- Cloudflare (website hosting and booking database);
- Stripe (card payments): Stripe also processes payment data as an independent controller for anti-money-laundering and fraud-prevention duties;
- Resend (delivery of confirmation emails), based in the United States;
- Formspree (delivery of the contact form by email), based in the United States;
- Google, only if you choose to load the map or accept statistics.
To avoid double bookings we share only occupied dates with Airbnb and Booking.com, without guest names or details. If you message us on WhatsApp, that service is provided by WhatsApp/Meta under its own privacy policy. Airbnb and Booking.com process data for bookings made on their platforms as independent controllers. Data may be disclosed to authorities where required by law.
5. Transfers outside the European Union
Some providers may process data in the United States. Such transfers rely on an adequacy decision (EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses (Articles 45 and 46 GDPR).
6. Retention
- Enquiries without a booking: up to 24 months.
- Booking data and accounting records: 10 years, as required by Italian civil and tax law.
- Guest registration data: only as long as needed for the report required by law.
- Statistics: according to Google Analytics retention settings (maximum 14 months).
7. Your rights
You can request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest (Articles 15–22 GDPR) by writing to info@villavictoria-italy.com. You can withdraw consent to statistics at any time. You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Is providing data mandatory?
The data requested in the forms and for bookings is needed to reply and to manage your stay. Identity document details are required by law: without them we cannot host you. We do not make decisions based solely on automated processing.