Privacy Policy
Information on the Processing of Personal Data
(in accordance with EU Regulation 2016/679 – GDPR)
Last updated: May 8, 2026
Welcome to the official website of Il Giardino di Villa Angela.
This Privacy Policy explains how personal data is collected, used, stored, and protected when users visit the website or submit requests and reservations related to the accommodation services offered by the property.
By using this website, users acknowledge this Privacy Policy.
1. Data Controller
The Data Controller is:
Costanza Zuccoli
© Il Giardino di Villa Angela
VAT Number: IT04648580985
CIN Code: IT017085B48LEOAGS6
Property Address:
Il Giardino di Villa Angela
Via Sambuco 35/a
25049 Iseo (BS) — Italy
Phone: +39 3756326962
Email: info@ilgiardinodivillaangela.com
2. Types of Data Collected
The website only collects personal data voluntarily provided by users in connection with:
- information requests;
- availability requests;
- reservations;
- direct communications by email or contact form.
The processed data may include:
- first and last name;
- email address;
- phone number;
- information necessary for managing reservations or stays;
- any content voluntarily included in messages sent by users.
The website does not intentionally collect sensitive personal data.
3. Purpose of Data Processing
Personal data is processed exclusively for the following purposes:
- responding to user inquiries;
- managing reservations and stays;
- complying with legal, fiscal, and administrative obligations;
- ensuring website security and proper functionality;
- preventing fraudulent or unauthorized use of the website.
Personal data is not used for advertising, marketing, or profiling purposes.
4. Legal Basis for Processing
The processing of personal data is based on:
- pre-contractual measures requested by the user;
- contractual obligations related to reservations;
- compliance with legal obligations;
- the legitimate interest of the Data Controller in maintaining website and business security.
5. Processing Methods
Personal data is processed using electronic, digital, and where necessary paper-based systems, in compliance with GDPR principles of lawfulness, fairness, transparency, and data minimization.
Appropriate technical and organizational security measures are adopted to protect personal data against:
- unauthorized access;
- improper disclosure;
- accidental loss or destruction;
- unlawful processing.
6. Data Retention
Personal data is retained only for the time necessary to fulfill the purposes for which it was collected and in accordance with applicable legal obligations.
Reservation-related data may be retained for the period required by tax, administrative, and public security regulations applicable to accommodation providers.
7. Disclosure of Data to Third Parties
Personal data is not sold or disclosed to third parties for commercial purposes.
Data may only be shared with parties involved in the technical or administrative management of the business, such as:
- hosting service providers;
- accounting or tax consultants;
- IT service providers;
- public authorities where required by law.
Such parties process data only within the limits necessary to perform their duties and in compliance with applicable regulations.
8. Cookies
The website uses only technical and functional cookies necessary for the proper operation of the website and its services.
The website does not use:
- profiling cookies;
- advertising cookies;
- commercial tracking systems;
- third-party cookies intended for user profiling or marketing purposes.
Technical cookies used by the website do not require prior user consent under applicable law.
9. User Rights
Users may exercise the rights provided by Articles 15-22 of the GDPR at any time, including:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability;
- right to lodge a complaint with a supervisory authority.
Requests may be sent to:
info@ilgiardinodivillaangela.com
Users also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali.
10. Data Transfers Outside the EU
Personal data is not transferred outside the European Union.
Should future technical services require transfers outside the EU, such transfers will take place in compliance with GDPR safeguards.
11. Changes to this Privacy Policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time.
Any changes will be published on this page together with the updated revision date.
12. Contact Information
For any questions regarding this Privacy Policy or the processing of personal data, please contact:
Il Giardino di Villa Angela
Via Sambuco 35/a
25049 Iseo (BS) — Italy
Phone: +39 3756326962
Email: info@ilgiardinodivillaangela.com