PRIVACY POLICY

Information on the processing of personal data pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR)

Welcome to the website artemisialuxuryvilla.com. The protection of your privacy and the security of your personal data are an absolute priority for us. This privacy policy describes how the website manages the processing of the personal data of users who consult and interact with it.

1. Data Controller

The Data Controller of personal data is:
Villa Artemisia
Strada Comunale Artemano, 40
80063 Piano di Sorrento (NA), Italy
Email: villamanager@artemisialuxuryvilla.com

2. Type of Data Collected

During the use of our website, we collect different types of personal data, depending on the user’s interaction:

A. Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses, browser type, domain names of computers used to connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, time of request, and other parameters relating to the user’s operating system and IT environment. The site also uses Google Tag Manager for tag management and analytics.

B. Data Provided Voluntarily by the User

We collect personal data provided explicitly and voluntarily by users through contact forms, availability check requests, or interaction via WhatsApp. This data includes:

Name and Surname
Email Address
Phone number (especially for WhatsApp requests)
Any personal data included in the text of the message or in requests for personalized services (e.g., dietary requirements, requests for private events or concierge services).

3. Purposes of Processing and Legal Basis

Personal data are processed for the following purposes:

Execution of pre-contractual and contractual measures: To respond to requests for information, process reservation requests for the Villa, the Suites, and organize private experiences or events. Legal basis: performance of a contract or pre-contractual measures (Art. 6, par. 1, lit. b, GDPR).
Website Operation and Security: To ensure the correct technical functioning of the site, prevent or discover fraudulent activities or computer abuse. Legal basis: legitimate interest of the Data Controller (Art. 6, par. 1, lit. f, GDPR).
Statistical Analysis: Through tools like Google Tag Manager, we collect data in aggregate and anonymous form to understand how users interact with the site, in order to improve our services and user experience. Legal basis: user consent expressed via cookie banner (Art. 6, par. 1, lit. a, GDPR).
Legal Obligations: To fulfill obligations established by law, regulations, community legislation, or an order from the Authority. Legal basis: legal obligation (Art. 6, par. 1, lit. c, GDPR).

4. Processing Methods and Security

Data processing is carried out using IT and telematic tools, with logic strictly related to the stated purposes and, in any case, in a manner that ensures the security and confidentiality of the data itself. We have adopted adequate technical and organizational measures to protect personal data from loss, unlawful use, unauthorized access, or alteration, reflecting the standards of excellence and confidentiality characteristic of Villa Artemisia.

5. Retention Periods

Personal data will be kept for the time strictly necessary to achieve the purposes for which they were collected:

Contact and reservation requests will be kept for the time necessary to process the request and, in the event of a subsequent booking, for the period required by tax and civil law obligations (generally 10 years).
Navigation data are deleted or anonymized immediately after statistical processing, unless required for the investigation of crimes by the Judicial Authority.

6. Data Sharing and Recipients

Data will not be publicly disclosed. They may be made accessible exclusively to:

Internal staff authorized for processing (e.g., Villa Manager, administrative or concierge staff).
Third-party service providers acting as Data Processors (e.g., web hosting providers, web development agencies, email service providers).
Third-party platforms used on the site (e.g., WhatsApp Inc. for managing direct messages, Google LLC for statistics). Such transfers take place in compliance with the appropriate safeguards provided by the GDPR.

7. Extra-EU Data Transfer

Some of the service providers (e.g., Google, WhatsApp) may reside outside the European Economic Area (EEA). The Data Controller ensures that the extra-EU data transfer will take place in compliance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses approved by the European Commission.

8. Data Subject’s Rights

Pursuant to Articles 15-22 of the GDPR, the user has the right to:

Access their personal data and obtain a copy.
Request the rectification of inaccurate data or the completion of incomplete data.
Request the deletion of data (right to be forgotten) if no longer necessary for the collected purposes.
Obtain the restriction of processing in certain circumstances.
Request data portability in a structured and machine-readable format.
Object, for reasons related to their particular situation, to data processing based on legitimate interest.
Withdraw the consent given at any time (e.g., for cookies), without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, the user can contact the Data Controller by sending a written communication via email to: villamanager@artemisialuxuryvilla.com.

The data subject also has the right to lodge a complaint with the Data Protection Authority if they believe that the processing violates the GDPR.

9. Changes to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time, giving information to users on this page. Please, therefore, consult this page regularly, referring to the date of the last modification indicated at the bottom.

Last updated: May 2026