Privacy Policy

Privacy Policy

Dear Guest,

In compliance with EU Regulation No. 679/2016 (GDPR), we would like to inform you that your personal data will be processed with fairness, transparency, and in full respect of your privacy.

  1. Purpose of Data Processing

Your personal data will be processed for the following purposes:

  • Management of reservations and requested services (e.g., accommodation, additional services). Processing is necessary for the execution of the contract.
  • Public security requirements (Art. 109 R.D. 18.6.1931 No. 773). We are obliged to communicate guests’ details to the competent authorities.
  • Administrative, accounting, and tax obligations, without requiring your consent.
  • Facilitating future reservations (with your consent, which can be revoked at any time, with data retention for a maximum of 5 years).
  • Receiving messages and phone calls during your stay (with your consent).
  • Sending promotional communications regarding rates and offers (with your consent, with data retention for a maximum of 5 years).
  1. Data Processing Methods and Security

Your data will be processed using both electronic and paper-based tools, adopting adequate security measures to prevent loss, unauthorized access, or unlawful use.

  1. Data Provision

Providing your data for contractual and legal purposes is mandatory. Failure to provide such data may prevent the provision of the requested services.

  1. Disclosure to Third Parties and Data Transfers

Your data may be disclosed to third parties (e.g., competent authorities, tax consultants, IT service providers) strictly for the purposes mentioned above. No data transfers outside the European Economic Area (EEA) are planned unless specific protection guarantees are in place.

  1. Data Subject Rights

At any time, you may exercise your rights under Articles 15-22 of the GDPR, including:

  • Access, rectification, or deletion of your data;
  • Restriction or objection to data processing;
  • Data portability, where applicable;
  • Withdrawal of consent at any time for processing based on consent.

To exercise these rights or request information, please contact:

Data Controller: Villa Toji – info@villatoji.com | +39 0630889977
Data Protection Officer (DPO): info@villatoji.com

If you believe your rights have been violated, you may file a complaint with the Supervisory Authority for the Protection of Personal Data.

Thank you for your trust and cooperation.