The following Conditions form the basis of your contract with Villatravellers. Please read them carefully as they set out our respective rights and obligations.
The company Villatravellers S.r.l. [private limited liability company], whose registered head office is located in Viale Leonardo da Vinci, 145-90145 Palermo, Italy (Italian VAT Number: IT06007910828) (hereinafter referred as “Data Controller”), as Data Controller for the processing of personal data, pursuant to the Articles no. 4, no. 7) and no. 24 of the REGULATION (EU) 2016/679 of the 27th of April 2016 with regard to the processing of personal data (hereinafter referred as “the Regulation”) informs that, in pursuance of the Article no. 13 of the Regulation, it shall manage the processing of personal data related to the users of its website.
Login - After purchasing (if you are a customer) or entering into a contractual relationship (if you are the owner of a villa or a travel agency owner) you can log in to the specific section. If you are a customer, you will find the summary of your travel data and you can share the itinerary with your friends. We will not use such data any further.
Chat - If you decide to chat with us while we are unavailable, please leave us your name, your email address so we can get in touch with you; otherwise, provide all the data you wish.
Contact us (Travellers) - In this section, we will ask you for your name and family name, email address and telephone number.
Contact us (Villa Owners) - In this section, we will ask you for your name and family name, email address and telephone number.
Send a request - If you fill the contact form, we will ask you for your name and family name, country, and telephone number.
Newsletter - If you subscribe to our newsletter, you will provide us with your email address.
Feedback - If you want to give us a feedback, we will ask you to provide us with your email address and name.
Ask for a Brochure - If you ask us for a brochure, we will need the following information: name and family name, email address, telephone number, country.
Villas Reservation - If you decide to book a villa, we will collect the following data: name and surname, email, address, zip code and municipality, phone number and fiscal code. We will also ask you for credit card details to make the payment. Credit card details will be only used for the payment. If you decide to book as a company, we remind you that legal entities are not considered data subjects pursuant to European Regulation, unless you insert a contact person’s data. If you can be considered as a data subject, we will also collect the following data: company name, VAT number and Univocal Code.
Experiences Reservation - If you decide to book an experience, we will collect the following data: name and surname, email, address, zip code and municipality, phone number and fiscal code. We will also ask you for credit card details to make the payment. Credit card details will be only used for the payment. If you decide to book as a company, we remind you that legal entities are not considered data subjects pursuant to European Regulation, unless you insert a contact person’s data. If you can be considered as a data subject, we will also collect the following data: company name, VAT number and Univocal Code.
In any case your IP address and the navigation logs will be saved.
The data processing shall be made in order to allow the implementation of the activities related to the establishment and management of the service required by the Data Controller. All the data shall be processed lawfully, correctly and with the utmost confidence, by respecting the adequate security measures, as provided by the Italian Code and the Regulation. Such processing shall be performed by analogical/digital means. However, the data shall not be publicly disclosed.
In particular:
Login - The legal basis and the purposes of processing is found in the execution of the contract.
Chat - The legal basis is intended to be consent; the purpose is intended to receive the information which is necessary.
Contact us (Travellers) - The legal basis is intended to be consent; the purpose is intended to receive information about our services.
Contact us (Villa Owners) - The legal basis is intended to be consent; the purpose is intended to receive information about our services.
Send a request - The legal basis is intended to be the execution of pre-contractual measures which are performed upon the request of the interested party; the purpose is intended to receive information about our services.
Newsletter - The legal basis is intended to be consent; the purpose is intended to be constantly updated about our promotions and initiatives.
Feedback - The legal basis is intended to be written consent; the Data Controller's legitimate interest is intended to be the possibility to send you our request; the purpose is intended to be the feedback about your experience of our services.
Ask for a Brochure - The legal basis is intended to be the execution of pre-contractual measures which are performed upon the request of the interested party; the purpose is intended to receive information about our services.
Villas Reservation - The purpose is to allow you to finalise your booking. The legal basis is the implementation of a contract and the compliance with legal obligations (including accounting and fiscal obligations). Your data may be used to assert or defend a case in court in case of litigation and this, therefore, coincides with the legitimate interest of the owner. Your data will be communicated to the owner of the villa, who will take care of the check-in procedure, duly appointed processor of the personal data. With the purchase, your data will be exported into CRM to send marketing information. Pursuant to art. 130-p.4 ld. N.196/03, your consent is not necessary. However, you can opt out at any time.
Experiences Reservation - The purpose is to allow you to finalise your booking. The legal basis is the implementation of a contract and the compliance with legal obligations (including accounting and fiscal obligations). Your data may be used to assert or defend a case in court in case of litigation and this, therefore, coincides with the legitimate interest of the owner. Your data will be communicated to our supplier of the chosen experience, with the purpose of a better performance of the services, as the duly appointed processor of the personal data. With the purchase, your data will be exported into CRM to send marketing information. Pursuant to art. 130-p.4 ld. N.196/03, your consent is not necessary. However, you can opt out at any time.
In every case the IP address which is associated to the navigation's log shall be collected for security purposes, related to the access to the systems; the legal basis is intended to be the Data Controller’s legitimate interest.
The Data Controller shall process the personal data for the time needed in order to fulfill the purposes mentioned above and, anyway, for
Login - Until you decide to unsubscribe yourself. We will delete your account seven (7) years after the last login. Before doing that, we will send you an email in order to know if you want to keep your account active. If you are a villa owner or a travel agency, we will delete your account ten (10) years after the termination of the contractual relationship.
Chat - We will delete the chat three (3) months after the contract.
Contact us (Travellers) - The data will be deleted after 12 months.
Contact us (Villa Owners) - The data will be deleted after 12 months.
Send a request - The data will be deleted after 12 months.
Newsletter - Your email address will be deleted five (5) years after the last email sent.
Feedback - The feedback shall be visible on the website whilst it is still active or until you ask us to delete it.
Ask for a Brochure - The data shall be deleted once you have provided what we have asked for.
Villas Reservation - Your data for this purpose will be deleted after 10 years, i.e. reaching the maximum limitation period and forfeiture of civil actions.
Experiences Reservation - Your data for this purpose will be deleted after 10 years, i.e. reaching the maximum limitation period and forfeiture of civil actions.
Navigation logs shall be stored for a maximum of 24 months.
The Data Controller shall communicate the data for the aims and purposes under the Article no.2 to all the subjects to whom the communication is compulsory by law and in order to fulfill the purposes provided by law. The data will not be subject of public disclosure in any case.
The management and storage of personal data shall be performed on the Data Controller’s servers located within the European Union and non-UE countries and/or third companies’ nominated and duly appointed as Data Supervisors. Moreover, in order to send commercial information, the Data Controller has a supplier, based in USA, which transfers the data to non-EU countries. From now on, the Data Controller ensures that the data transfer outside EU shall be performed in pursuance of the applicable statutory provisions by entering into, if any, agreements and in order to guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission. The list of the Data Supervisors is available in the head office.
As the interested party, the user has the rights set out in the Article no. 15 of the Regulation and, precisely:
1. The interested party has the right to obtain the confirmation of the existence or not of personal data related to them, even if they are not yet recorded, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
a) of the origin of the personal data;
b) of the purposes and the methods of processing;
c) of the logic applied in case of processing made by electronic instruments;
d) of the identification details of the Data Controller, the Data Supervisor and the Representative;
e) of the persons or categories of persons to whom the personal data can be communicated or disclosed as designated, statewide lien representative, Data Supervisors or persons in charge of the processing.
3. The interested party has the right to obtain:
a) the updates, rectification, or, when there is an interest therein, the data integration;
b) the cancellation, conversion into an anonymous form or the block of the data processed in breach of law, including those data where the storage related to the purposes for which they were collected or successively processed is unnecessary;
c) the confirmation that the operations stated in letters a) and b) have been acknowledged, even for their content, by those to whom the data has been communicated or disclosed, unless the case in which such performance is impossible or shall result in a disproportion between the enforceable right and the means used.
4. The interested party has the right to object, in whole or in part:
a) for legitimate reasons related to their personal data, even if pertinent to the purpose of the collection;
b) to the processing of their personal data, for the fulfillment of the purposes which are not provided by the Article no.2
Even pursuant to the Articles no. 15 et seq. of the GDPR, the user has the right to ask at any time for access to their personal data, the rectification or the cancellation of the same, the limitation of the processing in the cases provided by the Article no.18 of the GDPR, to obtain their personal data in a structured, commonly used and machine-readable format - former article no.20 of the GDPR. In any case, the user shall revoke - former to Article no. 7 of the GDPR - the consent given; lodge a complaint with the control competent authority - former to Article no.77 of the GDPR - if they retain the processing of their personal data is against the relative laws and regulations in force.
The user shall file notice of objection to the processing of their personal data – former to Article no. 21 of the GDPR – where to give evidence of the reasons that justify the objection; the Data Controller reserves the right to evaluate the claim which shall not be accepted in case of the existence of legitimate binding reasons, in order to proceed with the processing that prevail over the user’s interests, rights and freedom.
The interested party shall at any time exercise the rights referred to the previous Article by sending
- a registered letter with return receipt to: Villatravellers S.r.l. Viale Leonardo da Vinci, 145 - 90145 Palermo, Italy