Call us: +39 0577 1656 690 - Email us:


Privacy Policy

(Privacy Policy)

Art. 13 European Regulation No.2016/679 GDPR

Why this information

Dear Customer,
this Privacy policy describes how to manage the website of Our Company Vacavilla Srl in relation to personal data
processed by browsing this site.
The privacy policy is provided pursuant to Art. 13 European Regulation No.2016/679 GDPR, Art. 13 D.Lgs. 196/03
and D.Lgs. 101/18 and the Privacy Authority Provision "Identification of simplified procedures for disclosure and
“acquisition of consent for the use of cookies May 8, 2014 ". The information is provided only for the website of
Vacavilla Srl and not for other external websites, possibly consulted by the user through links.

The Data Controller
The Data Controller is Vacavilla Srl, Via F.lli Bandiera, 67 - 53034 Colle Val d’Elsa (SI), P.IVA 01301000525
Mail: info(at)

Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Usage
Data; Cookies; name, surname, email address.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using
this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to
provide this Data may make it impossible for this Application to provide its services. In cases where this Application
specifically states that some Data is not mandatory, Users are free not to communicate this Data without
consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal
Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used
by this Application serves the purpose of providing the Service required by the User, in addition to any other
purposes described in the present document and in the Cookie Policy, if available.

Additional categories of data
This is all the personal data provided by the visitor through the site, for example, by registering and / or accessing
a reserved area and / or a service and writing to an Vacavilla e-mail address to request information.

Place of data processing
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the
processing are located. For reservations, the data will be transmitted to the internal reservation software.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than
their own. To find out more about the place of processing of such transferred Data, Users can check the section
containing details about the processing of Personal Data. No data deriving from the web service make known,
except in cases expressly provided for by law. The personal data provided by users are used only to perform the
service or provision requested and expressed for the purpose of processing and are disclosed to third parties only
if this is necessary for this purpose and, if necessary, after obtaining the consent of user.

Purpose of data processing
Your data will be processed to:
- detect the experience of using our web services, as well as the products and services we offer, as well as ensure
the proper functioning of the web pages and their contents. The treatments put in place for these purposes are
based on a legitimate interest of the Data Controller, and do not require specific consent from the interested
party.-to answer to your purchase requests and / or the information you could do using the e-mail address or forms for
entering data on the website; this entails the subsequent acquisition of the sender's address, necessary to respond
to requests, as well as any other personal data included in the message.
- to make reservations for our accommodations.
- to follow up the specific requests addressed to the Data Controller by the User through the Website and its
communication tools (contact form, information request forms and similar).

Data processing procedures
Data processing will be carried out through instruments and procedures designed to ensure safety and
confidentiality, both in paper and electronically. These data will be processed by the company's authorized staff,
also using electronic instruments, and as well as trusted third parties who are officially helping us to provide the
aforementioned products and services (law firm, lawyer, business consultants). In addition, your data may be
disclosed to individuals, public and private, who may access these data under statutory or regulatory provisions
and within the limits imposed by these standards.

Data transfer outside the EU
No data is transferred outside the borders of the EU.

Retention time
The data will be kept for the time necessary for the fulfillment of legal obligations with respect to the purposes of
the processing. When the aforementioned legal obligations no longer exist, your data will be deleted or
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User
shall be retained until such contract has been fully performed.
- User data registered on a portal / website: the data will be stored until you request the deletion of your profile.
The cancellation request must be received from the email address provided during registration;

Rights of Users
You may exercise at any time, pursuant to Art. 7 of Legislative Decree No. 196/2003 and articles 15 to 22 of EU
Regulation No. 2016/679, the right to:
  a) obtain confirmation as to whether or not personal data concerning him/her exist;
  b) obtain information on the purposes of the processing, the categories of personal data, the recipients
      or categories of recipients to whom the personal data has been or will be communicated and, where
      possible, the retention period;
  c) request rectification and erasure of personal data;
  d) request restriction of processing;
  e) data portability, i.e. to receive personal data from data controller in a structured, commonly used and
      machine-readable format and have the right to transmit those data to another controller without
  f) oppose processing at any time, even for direct marketing purposes;
  g) object to an exclusively automated decision-making process on individuals, including profiling;
  h) ask the Data Controller to have access and rectify or delete personal data or to limit data processing
      concerning data subject, or to oppose data processing, besides the right to data portability;
  i) withdraw consent at any time, without affecting the lawfulness of any processing based on consent      given prior to revocation;
  j) file a complaint with a supervisory authority.

You can exercise your rights by sending a written request to Data Controller, to the registered office address: Via
F.lli Bandiera, 67 - 53034 Colle Val d’Elsa (SI), Italy, or to the email address: info(at)