Privacy Policy

Information on the Processing of Personal Data Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)

1. Data Controller

This website, www.villaliberty.net, is dedicated to Villa Liberty – Holiday Apartments, a holiday accommodation property located in San Vincenzo (Livorno), on Tuscany’s Etruscan Coast.

The Data Controller responsible for processing personal data is:

Paolo Andreini – Villa Liberty

• Address: Viale Marconi 8, 57027 San Vincenzo (LI), Italy

• Owner / Business Name: Paolo Andreini – Villa Liberty

• Email: info@villaliberty.net

• VAT Number: 01924410499

• Italian Tax Code: NDRPLA78E02L667I

• National Identification Code (CIN): IT049018B4QZL3NJ6F

For any enquiries regarding the processing of personal data, you may contact the Data Controller using the contact details provided above.

2. Types of Data Collected

The following categories of personal data may be collected when browsing and using this website.

Data Voluntarily Provided

The following information may be collected through contact and enquiry forms:

• First and last name

• Email address

• Telephone number

• Requested check-in and check-out dates

• Number of guests

• Any additional information included in the message

Browsing Data

The IT systems used to operate this website may automatically collect information such as IP addresses, browser type, device used, pages visited, and technical data relating to website navigation.

Cookies and Similar Technologies

The website may use technical cookies and, where required and subject to consent, analytics or third-party cookies, as described in the Cookie Policy.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes.

Managing Enquiries and Availability Requests

To respond to enquiries submitted through contact forms, email, or other communication channels.

Legal basis: Taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR).

Managing Bookings and Stays

If a booking is made, personal data may be used for activities necessary to manage the reservation and stay, as well as to comply with applicable legal requirements.

Legal basis: Performance of a contract and compliance with legal obligations (Articles 6(1)(b) and 6(1)(c) of the GDPR).

Website Operation and Security

To ensure the proper functioning of the website, prevent misuse, and protect IT systems.

Legal basis: The Data Controller’s legitimate interest in maintaining the security of its systems (Article 6(1)(f) of the GDPR).

Statistical Analysis

To analyse website usage and improve its content through analytics tools, where applicable.

Legal basis: User consent, where required by applicable legislation (Article 6(1)(a) of the GDPR).

4. Data Processing Methods

Personal data is processed using electronic and digital systems, with appropriate technical and organisational measures in place to protect it against unauthorised access, loss, disclosure, or misuse.

Data is processed exclusively for the purposes described in this Privacy Policy and only by authorised individuals or appointed service providers, where necessary.

5. Contact Forms

The website uses Contact Form 7 to manage enquiries and availability requests.

Information submitted through these forms is sent to the contact addresses configured by the Data Controller.

The website may also use Flamingo, a WordPress plugin that allows received enquiries to be stored within the website’s administration area.

Data collected through contact forms is not used for promotional purposes without an appropriate legal basis.

6. Cookies and Analytics Tools

The website uses technical cookies necessary for the proper functioning of its features.

It may also use analytics services, including Google Analytics, through Site Kit by Google.

Cookies and tools that are not strictly necessary are activated only when the conditions established by applicable legislation are met, including obtaining user consent where required.

Cookie preferences are managed through CookieYes, which allows users to accept, reject, or modify their choices.

For further information, please refer to the Cookie Policy available on this website.

7. Third-Party Content and Services

The website may integrate external services, such as maps, videos, booking platforms, or other embedded content.

Interaction with these services may involve the transmission of technical data to the respective providers, in accordance with their privacy policies.

Any services requiring consent are activated in accordance with the preferences expressed by the user.

When visitors access external booking services through links on this website, the processing of personal data by those services is governed by the respective providers’ privacy policies.

8. Disclosure of Data to Third Parties

Personal data may be disclosed, within the limits of the purposes described above, to:

• Hosting and IT service providers

• Email service providers

• Website maintenance providers

• Booking and reservation service providers, where applicable

• Professionals and consultants, where necessary

• Public authorities, where required by law

Personal data is not publicly disclosed or sold to third parties.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

In particular:

• Enquiries are retained for the period necessary to manage them and any subsequent communications or relationships.

• Booking-related data is retained in accordance with applicable contractual, tax, and legal obligations.

• Technical and browsing data is retained according to security requirements and the settings of the services used.

• Data collected through cookies is retained for the periods specified in the Cookie Policy.

At the end of the applicable retention periods, personal data is deleted or anonymised, unless further retention is required by law.

10. Data Transfers Outside the European Union

The use of certain third-party technology services may involve the transfer of personal data to countries outside the European Economic Area (EEA).

Where such transfers take place, the Data Controller undertakes to implement the safeguards required by the GDPR, including applicable adequacy decisions or Standard Contractual Clauses, where appropriate.

11. Data Subject Rights

Under Articles 15–22 of the GDPR, data subjects may exercise the following rights, where applicable:

• Right of access: To obtain access to their personal data

• Right to rectification: To request the correction of inaccurate data

• Right to erasure: To request the deletion of personal data

• Right to restriction of processing: To request restrictions on how their data is processed

• Right to data portability: To receive their data in a structured, commonly used, and machine-readable format, where applicable

• Right to object: To object to the processing of personal data

• Right to withdraw consent: To withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before its withdrawal

Requests may be sent to the Data Controller using the email address provided in this Privacy Policy.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) through its official website: www.garanteprivacy.it.

12. Changes to This Privacy Policy

The Data Controller reserves the right to update this Privacy Policy in response to legal, technical, or organisational changes.

Any updates will be published on this page.

Last updated: 28 October 2026