Privacy Policy

1. Data Controller

Salvatore De Lellis, as the operator of Villa Giovanna — a non-hotel accommodation business run on a non-entrepreneurial basis (family-run B&B) — with premises at Via Geppino Bojano 50, San Gregorio Matese, 81010, CE.
CIN (Italian National Identification Code): IT061076C2Q6R53TJS
Privacy contact email: prenotazione.villagiovanna@gmail.com

Villa Giovanna is a family-run accommodation business, not organised as a company: it therefore holds no VAT number. This does not exempt it from Regulation (EU) 2016/679 ("GDPR"), since guest data is collected in a structured way in order to provide a paid hospitality service.

2. Data collected

Through the booking request form on this site we collect: full name, email address, phone number (optional), check-in and check-out dates, number of guests and an optional message. This data is stored in a Supabase database, in a table dedicated solely to requests received from the site. No payment data is collected: no transaction takes place on this site.

If the request becomes a confirmed stay, we may collect further data required by law for the guest notification report to the Italian police authorities (e.g. identity document), handled separately from the site in accordance with the public security obligations that apply to accommodation providers.

3. Purposes and legal basis of processing

Data is processed for the sole purpose of replying to the availability/booking request and managing any resulting contractual relationship, pursuant to Article 6.1.b of the GDPR (pre-contractual measures taken at the data subject's request) and, for the public security obligations connected with hospitality, Article 6.1.c (legal obligation).

4. Where data is stored and for how long

Data collected through the form is stored on Supabase (cloud infrastructure based on Postgres), protected by access controls (Row Level Security) that prevent anyone other than the Data Controller from reading it through the public site. It is retained for as long as is necessary to handle the request and, where a booking is confirmed, for the period required by the accounting, tax and public security obligations applicable to accommodation businesses.

5. Disclosure and transfer of data to third parties

Data submitted through the form is processed by the technical service providers that make the site and its notifications work, acting as Data Processors:

• Supabase — hosting of the requests database;
• Resend — sending the notification email to the operator when a request arrives.

These providers may store data on servers located outside the European Union; in that case the transfer takes place on the basis of the safeguards provided for by the GDPR (e.g. the European Commission's standard contractual clauses). Data is not passed on to third parties for marketing purposes.

6. Cookies

This site does not use profiling cookies or third-party cookies for advertising purposes. Only technical elements necessary for the page to work are used.

7. Rights of the data subject

You may exercise the rights set out in Articles 15-22 of the GDPR at any time: access to your data, rectification, erasure, restriction of processing, portability and objection. To do so, simply write to prenotazione.villagiovanna@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), if you believe the processing infringes applicable law.

8. Updates

This policy may be updated over time; the date of the last modification is shown at the bottom of the page.

Last updated: 12 July 2026