Privacy Policy
Last updated April 30, 2026 · villairabo.it
Under EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended, Villa Irabo as Data Controller provides the following information on the processing of personal data collected through this website.
Data Controller
Cortinovis Ruggero — Villa Irabo, Regione Antognano, 64 — 17031 Albenga (SV), Italia. Email: info@villairabo.it. Phone: +39 349 676 5085. VAT 01234567890.
Types of data collected
Contact data voluntarily provided: name, email, phone, stay dates, number of guests, optional messages.
Browsing data: IP address, browser type, pages visited, date and time — collected anonymously for statistical and security purposes.
Cookies: see Cookie Policy for details.
Purposes of processing
Responding to availability requests and bookings.
Compliance with contractual, tax and legal obligations (guest registration with Italian State Police, regional Liguria communications, invoicing).
Improving the site, anonymously and in aggregate, subject to consent for analytics cookies.
Legal basis
Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) for booking requests.
Legal obligation (Art. 6.1.c GDPR) for guest registration and tax requirements.
Consent (Art. 6.1.a GDPR) for non-technical cookies and promotional communications.
Data retention
Booking data: 10 years (tax obligations).
Guest data registered with police: as required by law.
Information requests without booking: 24 months from last contact.
Cookies: as listed in the Cookie Policy.
Disclosure to third parties
Data may be disclosed to: hosting provider Vercel Inc. (USA, with EU Standard Contractual Clauses), email forwarding service ImprovMX, competent authorities (Italian Police, Tax Agency), accountant.
No sale of data to third parties for commercial purposes.
Transfer outside the EU
Some providers (Vercel, Google if analytics cookies are enabled) are based in the United States. Transfers take place with adequate safeguards (Standard Contractual Clauses approved by the EU Commission).
Your rights
Under Articles 15-22 GDPR, you have the right to access, rectify, erase your data, restrict or object to processing, obtain data portability and withdraw consent at any time.
To exercise these rights write to info@villairabo.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Security
The site is served exclusively over HTTPS with a Let's Encrypt certificate. Booking data is protected against unauthorized access with appropriate technical and organizational measures.