Privacy Policy

1) Who processes your data:

​

Villa “Le Quattro Pietre”
Address: Via Pietro Summonte, 8 – 84010 Furore (SA), Italy
Email: lequattropietrefurore@gmail.com – Tel: +39 378 40 70 300
The Controller has not appointed a Data Protection Officer (DPO).

​

2) Data we collect on the website:

​

• Contact & stay request data: first name, last name, email, phone number, arrival/departure dates, number of guests, message and preferences.

• Booking data: information necessary to pre-book the villa (managed via the Wix platform).

• Technical browsing data: IP address, online identifiers, technical logs and cookies/analogous technologies (see § 9 Cookies).

• Check-in & legal obligations: the data required by public-security rules are collected outside the website and sent via Alloggiati Web within the statutory deadlines. For stays longer than 24 hours: within 24 hours of arrival; for stays of 24 hours or less: within 6 hours.

​

3) Purposes and legal bases:

​

We process data only for specific, lawful purposes:

• Replying to information requests submitted through the form or by email/phone – Art. 6(1)(b) GDPR (pre-contractual steps) and 6(1)(f) (legitimate interest in handling requests).

• Managing pre-bookings and stays (availability, quotes, operational communications) – Art. 6(1)(b) (contract/services requested).

• Legal obligations (public security – Alloggiati Web; tax/administrative duties) – Art. 6(1)(c).

• Site security, fraud/abuse prevention – Art. 6(1)(f) (legitimate interest).

• Non-essential cookies/analytics (if enabled via banner): consent – Art. 6(1)(a) (revocable at any time from the banner).

​

4) Data provision:

​

• Data required to answer requests or manage a booking must be provided; if not, we cannot proceed.

• Consent to non-essential cookies is optional and may be refused or withdrawn without affecting essential browsing.

​

5) Methods of processing and security:

​

Data are processed using IT tools and appropriate organizational measures: HTTPS/TLS, access control, backups, permission minimization, and access monitoring. We keep data only as long as necessary for the stated purposes or as required by law.

​

6) Who we share data with (recipients):

​

• Wix.com Ltd. (website platform, hosting, forms, bookings, cookie-consent management). Wix acts through group companies and appointed sub-processors.

• Public Security Authority via Alloggiati Web, and the Municipality for the tourist tax, where applicable (legal obligations).

• Technical providers/consultants delivering IT or site support, bound by confidentiality and, where applicable, by Article 28 GDPR agreements.

​

If an online payment is requested during booking via a payment provider (e.g., services integrated into the platform), payment data are processed on the provider’s pages/systems under their responsibility; we do not store full card numbers.

​

7) Transfers outside the EEA:

​

• Wix is headquartered in Israel, a country covered by an EU adequacy decision under Article 45 GDPR.

• For any sub-processors located in non-EEA countries (e.g., the United States), Wix indicates the use of Standard Contractual Clauses (SCCs) and other compliant mechanisms. For certified U.S. recipients, the EU-U.S. Data Privacy Framework (DPF) may apply.

​

8) Retention periods:

​

• Contacts/quotes: up to 12 months from the last meaningful interaction.

• Booking files and contractual records: for the duration of the stay and subsequently for statutory administrative/tax terms (up to 10 years for civil/tax documents).

• Data sent to Alloggiati Web: stored internally only as long as strictly necessary to evidence compliance and as permitted by applicable law; transmission receipts may be kept for protection purposes.

• Technical security logs: typically 6–12 months, unless needed to investigate incidents.

• Cookies: as shown in the banner/consent tool.

​

9) Cookies and other trackers:

​

A consent banner provided by Wix is active on the site: non-essential cookies are installed only after explicit consent; essential cookies (required for the site and forms to work) may be used without consent. You can review or change your choices at any time via the banner.
Typical cookie categories on the site:

​

• Essential (site operation, security, session management).

• Analytics/measurement (aggregated statistics) – only if enabled by consent.

• Functional/embedded content (e.g., maps, videos) – only if enabled by consent.
  The up-to-date cookie list and durations are shown in the banner and its “more information” view.

​

10) Your rights:

​

At any time you may:

​

• access your data, rectify them, erase them, or restrict processing;

• object to processing based on legitimate interest;

• withdraw consent (e.g., for non-essential cookies) without affecting the lawfulness of processing before withdrawal;

• request data portability, where applicable. To exercise your rights: email lequattropietrefurore@gmail.com.

​

​

11) Minors:

​

The site and services are intended for adults. Requests and bookings must be submitted by persons aged 18 or over.

​

12) Links to third-party sites/services:

​

Embedded features (e.g., forms, maps, widgets) may refer to third-party services acting as independent controllers. Please read their respective privacy notices.

​

13) Website platform and information about Wix:

​

This site is developed and hosted on the Wix platform. For how Wix processes data of visitors to sites built on its platform (so-called “Users-of-Users”), please refer to Wix’s Privacy Policy and its sub-processor list.

​

14) Changes to this notice:

​

We may update this Privacy Policy to reflect regulatory or technical changes. Updates will be published on this page with the effective date shown at the top.