Villa Ulimare Family Residence · Vieste
Privacy Policy
What we do with your data, explained by us, the family, in plain words.
Last updated
At a glance
- We use your data for your quote and your stay. For nothing else.
- We don’t sell or pass on your data to anyone.
- We don’t keep mailing lists and we don’t send newsletters.
- Without your yes, Google and Meta receive nothing.
- Your requests are read by us, the family, not by a call centre.
- You can ask us at any time to see, correct or delete your data.
Who looks after your data
We do: the family who runs Villa Ulimare.
Data controller: the person who decides how your data is used and is responsible for it. That’s us.
- Who
- EXPERIENCE di Lopriore Raffaele, which runs Villa Ulimare Family Residence
- Where
- Contrada Macchia di Mauro, 2, 71019 Vieste (FG), Italy
- VAT number
- 04227510718
- info@villaulimare.it
- Phone
- +39 347 9438934
We haven’t appointed a data protection officer (DPO). If you have any questions about your data, write to us or call us: we’ll answer ourselves.
What data we collect
Only what you give us, plus a little technical data about your visit.
- If you ask for a quote
- arrival and departure dates, apartment, number of adults and children, notes, full name, email and phone number. Along with these, the page you write to us from and the type of device you use (phone, tablet or computer).
- If you write to us or call us
- your number or email address, the name you give us and what you write to us, on WhatsApp, by email or on the phone.
- While you browse
- the server records technical data about your visit: IP address, the browser you use, the page and the time.
- Only if you accept
- how you use the site and which ad brought you here, for statistics and advertising.
- When you stay with us
- your booking details and the details the law requires us to collect on arrival.
In the notes of the form, only write what’s needed for your stay: we don’t need any health information or other sensitive data.
Why we use it
Every use has a reason set out in the law. Here they all are.
Legal basis: the reason, set out in the law, that allows us to use your data. Without one, we couldn’t.
| Why | On what basis |
|---|---|
| Replying to you and preparing your quote | You ask us toArt. 6(1)(b): steps before a contract, at your request |
| Asking you, just once, whether your quote reached you | It’s part of your requestArt. 6(1)(b): steps before a contract, at your request |
| Managing your booking and your stay | Our agreementArt. 6(1)(b): contract |
| Reporting guests to the police, keeping receipts and invoices | The law requires itArt. 6(1)(c): legal obligation |
| Keeping the site secure and working | A reasonable interest of oursArt. 6(1)(f): legitimate interest |
| Visit statistics and ad measurement | Only if you say yesArt. 6(1)(a): consent |
We need the details in the form to prepare your quote: without them, we can’t. Everything else is optional.
If we haven’t heard from you after a few days, we’ll send you a single email to ask whether your quote reached you. It’s written and sent by a member of the family, not by software.
No decision is made by a computer: every reply is written by a person from our family. Our emails contain nothing that checks whether you open them.
How long we keep it
As long as we need it to recognise you; we delete it when you ask us to.
- Enquiry without a booking
- it stays with your details, so we can find the history of your enquiries if you write to us again. We delete them if you ask us to: just send an email.
- Form protection
- one hour. To stop automated submissions, we keep a fingerprint of your IP address. Your address can’t be worked out from it. Then we delete it.
- Backups
- encrypted, for 35 days at most. Then we delete them.
- Booking and stay
- it stays with your details, so we can recognise you straight away if you come back. We delete them if you ask us to: just send an email (receipts and invoices are kept for the time stated below).
- If you come back
- we keep your name, address, phone number and email, linked to your email address, so we can find you straight away if you write to us again. They stay until you ask us to delete them: just send us an email.
- The emails and WhatsApp messages you send us
- they stay in our mailbox and in our log, so we can see the history of your enquiries. We delete them if you ask us to.
- Receipts and invoices
- 10 years, as the law requires (Article 2220 of the Italian Civil Code).
- Reporting to the police
- we don’t keep copies of your ID. We only keep the receipt for the report, for 5 years, as the law requires.
- Statistics
- 14 months in the Google Analytics reports.
- Cookies
- the time shown in the cookie table.
Who else sees your data
A few trusted companies, which use the data only on our behalf.
Data processors: companies that work for us, under a contract that requires them to protect your data and to use it only for the service they provide to us.
- Aruba S.p.A., Italy
- hosts the site, our email inbox, where your request reaches us, and the log in which we keep track of it until we reply. It also runs the network that makes the pages fast.
- Resend, United States
- sends you the email confirming that we’ve received your request. It also delivers your request to us, but only if our inbox isn’t responding.
- GitHub, United States
- keeps the backups of our log. They’re encrypted: without our key, nobody can read them, not even GitHub.
- ZapClaw, Brazil
- brings the messages you send us on WhatsApp into our log, so none get lost. It doesn’t keep the text of a message: it deletes it as soon as it reaches us, after 7 days at most. It only keeps your number and your WhatsApp profile name.
- Anthropic, United States
- a program that helps us read your request (dates, guests, apartment) and prepare our reply. We check and send every reply ourselves. It doesn’t use your data for training.
- visit statistics (Google Analytics) and ad measurement (Google Ads), only if you accept. If you also accept advertising, Google Signals links your visit to your Google account, if you have one and have turned on personalised ads.
- Meta
- ad measurement on Facebook and Instagram (Meta Pixel), only if you accept.
Then there are services you choose yourself, with their own privacy rules:
- if you write to us there, the message goes through WhatsApp, which is a Meta service. On our side, only Raffaele reads it.
- Facebook, Instagram and YouTube
- on our site they’re just links. As long as you stay here, nothing of theirs is loaded.
- Booking sites
- if you book through a booking site, its own privacy policy applies too.
We only share data with public authorities when the law requires us to. We don’t sell or pass on your data to anyone.
Data outside Europe
Some data may go to the United States, always with the protection of European law.
Data Privacy Framework: the agreement under which the European Union recognises that American companies signed up to it protect data as well as in Europe (European Commission decision of 10 July 2023).
- Resend
- even though the emails are sent from Ireland, it stores the service data in the United States. It is certified under the Data Privacy Framework.
- GitHub
- states that it adheres to the Data Privacy Framework and only receives encrypted copies.
- ZapClaw
- works in Brazil, which the European Commission recognises as protecting data as well as Europe does (adequacy decision of 26 January 2026).
- Anthropic
- transfers data under the standard contractual clauses approved by the European Commission.
- states that it adheres to the Data Privacy Framework.
- Meta
- transfers data with the safeguards provided for by European law.
Cookies
Without your yes, only what’s needed to make the site work.
Cookie: a small file that the site saves in your browser to remember something: for example, your choice about cookies.
On your first visit, a notice asks what you prefer: Accept all, Reject or Customise. If you close it with the X, that counts as rejecting. You can change your mind at any time with the Cookie preferences link at the bottom of every page. The notice asks you again after 6 months.
If you reject, the Google and Meta code doesn’t even load: they receive nothing. You can also delete cookies in your browser settings.
The site’s fonts are on our own server: to show them to you, we don’t need to ask anyone else for anything.
When you stay with us
When you arrive, the law asks us for some details. Nothing more.
Like every holiday accommodation in Italy, we report our guests’ details to the police through the official online guest registration service, as the law requires (Article 109 of the Italian Consolidated Law on Public Security).
For the tourist tax, we give the Municipality of Vieste the details it asks for.
We look at your ID, but we don’t make copies of it. Please don’t send us photos of your documents on WhatsApp.
If you pay by card, the card details are handled by the payment network: we don’t keep them.
Your rights
Your data is yours: you can see it, correct it, delete it.
- See it
- find out what data we hold about you and receive a copy.
- Correct it
- if it’s wrong or incomplete.
- Delete it
- when we no longer need it or there’s no reason to keep it.
- Pause it
- ask us not to use it for a while, for example while we look into a request of yours.
- Take it with you
- receive it in a format you can give to someone else.
- Object
- to the use we make of it for an interest of ours.
- Withdraw your yes
- at any time, from the Cookie preferences link or by writing to us.
For all of this, just send an email to info@villaulimare.it or give us a call. It’s free, and we’ll reply within one month, as the law requires.
If you think we haven’t respected your rights, you can lodge a complaint with the Italian Data Protection Authority (opens in a new tab), Piazza Venezia 11, 00187 Rome.
If anything changes
We’ll write it here and update the date.
This page is the privacy notice required by the European data protection regulation (Regulation (EU) 2016/679, known as the GDPR) and by the Italian Privacy Code. We’ve written it in plain words: if anything isn’t clear, just ask us.
Whenever you like
Request your quote
Tell us who you are and when you’d like to come: one of our family will reply with a quote made just for you.
Would you rather call or write to us?
