Privacy Policy (GDPR)

1. Data Controller

Vacanzepila.it – Owners' consortium in Pila (Gressan), Aosta Valley, Italy. Email: [email protected]

2. Data Processed

Contact data (name, email, phone), booking data (dates, chosen accommodation, preferences).
Payment data (managed by third-party PCI-DSS compliant providers; we do not store card numbers).
Site usage data (technical cookies, aggregated statistics, security logs).

3. Purposes and Legal Basis

Fulfilling requests and bookings (Art. 6(1)(b) GDPR – performance of pre-contractual measures/contract).
Legal/tax compliance (Art. 6(1)(c) GDPR).
Service communications and customer support (Art. 6(1)(b)/(c)).
Statistics and site improvement (Art. 6(1)(f) – legitimate interest, aggregated/anonymized data).
Marketing (newsletter/remarketing) only with consent (Art. 6(1)(a)) and the option to withdraw.

4. Data Retention

Data is retained for the time necessary for its purpose and/or for legal obligations (10 years for accounting/tax documents).

5. Data Recipients

Lodgify platform (hosting/bookings), IT providers, customer support.
Payment gateways and banking institutions.
Professionals (accountant/consultants) for accounting/tax compliance.

6. Transfers Outside the EU

If some providers are located outside the EEA, the transfer is carried out in compliance with Chapter V of the GDPR (Standard Contractual Clauses/adequacy decisions).

7. Rights of Data Subjects

Access, rectification, erasure, restriction, portability, objection (Arts. 15–22 GDPR). To exercise them: [email protected]. Right to lodge a complaint: Data Protection Authority (Garante per la protezione dei dati personali).

8. Security

We adopt appropriate technical and organizational measures (HTTPS, access control, data minimization).

9. Minors

The site is not intended for minors under 16 years of age; any data from minors for the purpose of a stay is processed with parental/guardian consent.

10. Privacy Contacts

Email: [email protected]