The Data Controller is Proprietà Vernaschi, based in Via Pietrolone 24, 60030 Santa Maria Nuova (AN), Italy. For any request regarding the processing of your personal data, you may write to: info@villavernaschi.com.
Personal, contact and payment details are processed to conclude and perform the rental agreement (Article 6(1)(b) of Regulation (EU) 2016/679 — "GDPR"). Without this data, the booking cannot be finalised.
The identity document and personal details of guests are reported to the competent local police authority ("Questura") through the "Alloggiati Web" portal, in compliance with the obligation set out in Article 109 of the Italian Consolidated Public Security Act (Royal Decree 773/1931), as amended. This processing is based on a legal obligation (Article 6(1)(c) GDPR) and does not require the data subject's consent.
Photographs and videos taken during the event and during the stay at the villa are used for promotional and marketing purposes (website, social media, brochures), with full respect for the dignity of all individuals involved, as set out in the Rental Agreement. This is a contractual clause accepted upon signing the contract itself — on the same footing as the other clauses that are mandatory for the contract to be finalised — and not a separate, optional or freely revocable consent (Article 6(1)(b) GDPR — contract performance).
This provision applies reciprocally: should the Guest freely choose to photograph or film the villa during the stay and publish such content online (for example on social media) without requesting the Property's authorisation, the Property likewise reserves the right to use and share such content, made public by the Guest, for the same promotional purposes.
For the safety of guests and of the property, Villa Vernaschi is equipped with security cameras that cover the outdoor areas only. There are absolutely no cameras inside the house. The use of the video surveillance system is mandatory for the safety of guests and of the property. The outdoor areas, including the pool area, are under video surveillance and may also be visible to people nearby; privacy therefore cannot be guaranteed there. For this reason, nudity and any other inappropriate behaviour are not permitted in the outdoor areas, in accordance with Articles 527 and 726 of the Italian Criminal Code on obscene acts and acts contrary to public decency. This processing is based on the Property's legitimate interest in protecting the safety of people and property (Article 6(1)(f) GDPR). The footage is never published or used for marketing purposes, and may be disclosed only to the competent authorities, at their request or in the event of unlawful acts.
Data may be disclosed to: competent public authorities (e.g. the Questura, in compliance with legal obligations); parties acting as data processors on behalf of the Property (e.g. IT service providers, hosting, booking management systems). Data is not sold or transferred to unrelated third parties. It is understood that, where content is published (for example on social media), any subsequent sharing or reposting by third parties, in line with the ordinary dynamics of such platforms, is not within the Property's control.
Contractual and administrative data, including photographs and videos used for marketing purposes, is retained for the period required by applicable civil and tax law. Data submitted through the Alloggiati Web portal is retained according to the timeframes set out in the relevant public security regulations. Video surveillance footage is kept for a maximum of 72 hours and then automatically deleted, unless it must be retained for longer following a specific request from the judicial or police authorities.
As a data subject, you have the right to request access to your data, rectification, erasure, restriction of processing, objection to processing, and data portability at any time, within the limits and conditions set out in Articles 15-22 of the GDPR. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).
Please note that the right of access remains exercisable at all times with respect to all data processed. The rights of rectification, erasure and restriction of processing, however, cannot be exercised in relation to data whose provision is necessary for the performance of the contract or for compliance with legal obligations (for example, data reported to the Questura), pursuant to Articles 17(3)(b) and (c), and 18 of the GDPR.
Providing personal and contact details, as well as accepting the contractual clauses concerning the use of photographs and videos for marketing purposes, are mandatory for the contract to be finalised and for compliance with legal obligations; failure to provide this data, or failure to agree to one or more clauses of the contract, will make it impossible to proceed with the booking.