Privacy & Data Protection Policy

Villa Essenza (hereinafter referred to as the "Property") is committed to protecting the privacy and personal data of its guests and website users, in compliance with the General Data Protection Regulation (EU/2016/679 - GDPR).

1. Data Controller

The Data Controller for personal data processing is the manager of Villa Essenza, located in Albenga (SV), Italy.

• Contact Email: wonders.liguria@gmail.com

2. Personal Data Collected

We collect and process only the data strictly necessary for booking and stay management:

• Identification and Contact Data: Full name, email address, phone number, residential address.

• Payment Data: Credit/debit card details (handled securely and in encrypted form directly by Stripe; the Property never stores or views full card numbers).

• Legal and Reporting Data: Identity document details (requested exclusively at check-in to comply with mandatory legal requirements).

3. Purposes and Legal Bases for Processing

The provided data will be processed for the following purposes:

1. Booking Management: Processing requests, sending confirmations, managing stays, and service communications (legal basis: performance of a contract).

2. Payment Management: Charge of deposit and final balance via the secure Stripe platform (legal basis: performance of a contract).

3. Legal Obligations:

   • Reporting guest details to local authorities via the state police portal (Portale Alloggiati Web - Art. 109 T.U.L.P.S.).

   • Statistical reporting to the Liguria Region: Submitting guest flow data for national ISTAT statistics via the regional C59 / ROSS 1000 system (legal basis: regional and national legal obligations).

   • Collection and reporting of the Tourist Tax for the Municipality of Albenga.

4. Guest Support: Direct communications via email or WhatsApp to arrange check-in times and provide essential stay information (legal basis: legitimate interest / performance of a contract).

4. Data Processors and Third-Party Tools

Personal data will never be sold or shared with third parties for marketing purposes. It is shared exclusively with technical service providers strictly involved in stay management:

• Smoobu GmbH: Property Management Software (PMS) and Channel Manager.

• Stripe Inc.: Secure platform for digital payment processing.

• Hostinger: Web hosting service.

• Public Authorities & Entities: Police Headquarters (Questura), Liguria Region (C59 / ROSS 1000 system), and the Municipality of Albenga, to fulfill regulatory, statistical, and tax obligations under applicable law.

5. Data Retention

Personal data will be stored only for the time strictly necessary to complete stay management and fulfill legal, tax, and civil obligations (up to a maximum of 10 years for accounting records and invoices).

6. Data Security

Personal data is processed using automated tools and appropriate security measures to prevent data loss, unlawful or improper use, and unauthorized access.