Last updated: 9 September 2026
Privacy Policy
This notice explains how Villa Elvira Country House processes personal data collected through this website, information requests and direct booking requests.
Data controller
Villa Elvira Country House, Belvedere Marittimo (CS), Calabria, Italy. For privacy-related requests, please use the Contact page on this website. Privacy contact.
Data we may process
- Data you provide voluntarily: full name, email, phone number, stay dates, number of guests and any notes submitted through forms.
- Technical data needed for website operation and security, such as IP address, server logs, browser and device information.
- Consent preferences relating to cookies and similar technologies, managed through the website consent system.
Purposes and legal bases
- Handling information and booking requests: steps taken at your request before entering into a contract and, where applicable, performance of the contract.
- Compliance with administrative, tax, accounting or legal obligations: compliance with legal obligations.
- Website protection, abuse prevention and technical continuity/security: legitimate interest of the controller.
- Statistics and analytics: only when enabled and, where required, after obtaining consent.
Bookings and calendars
The internal calendar may use iCal feeds to synchronise availability periods with external platforms. Villa Elvira iCal feeds are designed to exchange availability blocks only and do not expose guest names, email addresses or other personal data. Bookings made directly on external platforms are also subject to those platforms’ privacy notices.
Recipients and service providers
Data may be processed by technical providers needed to operate the website and connected services, such as hosting, email, security, consent management, analytics when enabled and payment services when present. These providers act under their applicable privacy roles and agreements. Data may also be disclosed to public authorities where required by law.
Transfers outside the EEA
Some technology providers may process data outside the European Economic Area. Where this occurs, processing relies on transfer mechanisms recognised by applicable law and on safeguards adopted by the relevant providers.
Retention
Data is kept for the time necessary to handle the request or stay and afterwards for periods required by administrative, tax, accounting, contractual or legal obligations. Technical logs are retained according to applicable hosting and security settings.
Cookies and measurement tools
Detailed information about cookies and technologies used, including how to accept, refuse or change consent, is available in the Cookie Policy and consent banner used by the website.
Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction of processing, data portability and objection; you may also withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may lodge a complaint with the competent data protection authority.
Security
We apply reasonable technical and organisational measures to protect data processed through the website. No Internet-connected system can guarantee absolute security.
Changes to this notice
This notice may be updated when services, providers or applicable rules change. The version published on this page is the version currently in force.