Privacy Policy

1. Data controller

Hotel Meublé Villa Neve, Via Baron Franchetti 18 — 32043 Cortina d’Ampezzo (BL), Italy. VAT 00858110257 — CIN IT025016A1YAH55AHC.

Email: info@hotelvillaneve.it
Phone: +39 0436 2228

For any request regarding the processing of personal data, please write to the controller at the email address above.

2. Categories of data collected

The site collects the following categories of personal data, only when voluntarily provided by the user or necessary for the service to function:

• Contact form data: full name, email address, message content.
• Technical navigation data: IP address (anonymised at /24 subnet level), browser type, language, pages visited, referrer, date and time of visit.
• Cookie consent state: choices made on the banner, timestamp, anonymised IP, version of the policy accepted.

The site does not collect newsletter subscriptions, payment data, health data or any data belonging to special categories (Art. 9 GDPR).

3. Purposes and legal bases of processing

Personal data are processed for the following purposes:

• Replying to inquiries through the contact form — legal basis: consent of the data subject (Art. 6.1.a GDPR), given by ticking the consent box when submitting the form.
• Compliance with legal obligations in tax and accounting matters, where the inquiry leads to a booking — legal basis: legal obligation (Art. 6.1.c GDPR).
• Anonymous traffic measurement through Matomo configured in cookieless mode with anonymised IP — legal basis: legitimate interest (Art. 6.1.f GDPR), compliant with the Italian Data Protection Authority’s Guidelines of 10 June 2021, which do not require consent for anonymised analytics.
• Recording of cookie consent for demonstrability purposes — legal basis: legal obligation (Art. 7.1 GDPR).

4. Method of processing

Data are processed exclusively by electronic means, with adequate technical and organisational security measures (TLS encryption in transit, access limited to authorised personnel, periodic backups). No automated decision-making or profiling is carried out.

5. Place of processing and providers

Data are hosted on servers located in Italy and managed by the hosting provider Serverplan S.r.l., appointed external processor pursuant to Art. 28 GDPR.

The contact form sends data via email to info@hotelvillaneve.it through the controller’s mail provider and stores a copy of the message in the MySQL database hosted on the same server.

When the user consents to third-party cookies, navigation data may be transferred to non-EU providers (e.g. Google LLC for the map, TripAdvisor LLC for the reviews widget). Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission. In the absence of consent, these services are not loaded.

6. Retention period

• Contact form messages: 24 months from receipt, unless the request leads to a contractual relationship.
• Bookings and related tax records: 10 years (Art. 2220 Italian Civil Code and Art. 22 Presidential Decree 600/73).
• Cookie consent register: 12 months from the date of consent.
• Matomo statistics (anonymous): 13 months.
• Server technical logs: maximum 30 days, unless required to investigate unlawful acts.

7. Disclosure of data

Data are not disseminated. They may be disclosed exclusively to:

• authorised internal personnel of the controller;
• the hosting provider (Serverplan S.r.l., Italy);
• the controller’s accounting, tax or legal advisors, only when strictly necessary;
• public authorities, in compliance with legal obligations.

8. Cookies and similar technologies

The site uses only technical cookies and cookieless analytics. Any third-party content (Google Maps, TripAdvisor) is loaded only with express consent. Details are described in the Cookie Policy.

9. Data subject rights

Pursuant to Articles 15-22 GDPR, the data subject has the right to:

• access their personal data (Art. 15);
• request rectification (Art. 16);
• request erasure, also known as the "right to be forgotten" (Art. 17);
• request restriction of processing (Art. 18);
• receive data in a structured format and transmit it to another controller (Art. 20);
• object to processing at any time (Art. 21);
• withdraw consent, without affecting the lawfulness of prior processing (Art. 7.3);
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, simply write to info@hotelvillaneve.it. The controller will respond within 30 days of the request.

10. Changes to this policy

The controller reserves the right to update this policy at any time to reflect regulatory or technical changes. Changes will be published on this page; the version number and date of the last update are shown at the top of the document.