Privacy Policy
Last updated: September 2026 — compliant with GDPR (EU 2016/679)
1. Data controller
Deschaux Jeanne (private individual)
Codice fiscale: DSCJNN71L64F943Q
c/o Paola Deschaux Dimaio, Largo Nazario Sauro 4, 96017 Noto (SR) — Italy
Email: contact@villavenusnoto.com
2. Data collected
When submitting a booking request through the contact form, we collect:
- Full name
- Email address
- Phone number (optional)
- Requested stay dates and number of guests
- Message
We do not collect payment data directly — payments are made by bank transfer or as separately agreed.
Under Italian law (Alloggiati Web), identity data for all guests (ID document) must be transmitted to public security authorities within 24 hours of arrival.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Respond to your booking enquiry | Performance of a contract (Art. 6.1.b GDPR) |
| Alloggiati Web declaration (legal obligation) | Legal obligation (Art. 6.1.c GDPR) |
| Sending confirmation email and booking follow-up | Performance of a contract (Art. 6.1.b GDPR) |
| Recording your consent to data processing | Consent (Art. 6.1.a GDPR) |
4. Processors and recipients
Your data is processed only by:
- Supabase Inc. (database hosted in Europe) — storage of booking requests
- Resend Inc. — transactional email delivery (confirmation receipt)
- Vercel Inc. — website hosting
No data is sold or transmitted to third parties for advertising purposes. Supabase and Resend are GDPR-compliant and sign DPAs (data processing agreements).
5. Retention period
- Booking requests not converted into a contract: 1 year from receipt
- Data related to an actual stay: 5 years (Italian statutory retention period for tax purposes)
- Alloggiati Web data: in accordance with Italian authority requirements
6. Your rights
Under the GDPR, you have the following rights:
- Access — obtain a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion (within legal limits)
- Objection — object to processing
- Portability — receive your data in a structured format
- Withdrawal of consent — at any time, without retroactive effect
To exercise these rights: contact@villavenusnoto.com. We respond within 30 days. In case of dispute, you may lodge a complaint with the relevant supervisory authority (in France: CNIL; in Italy: Garante Privacy).
7. Cookies
This website uses technical cookies necessary for its operation. No advertising cookies are placed without your prior consent. For more information, please see our cookie policy.
8. Security
Your data is transmitted via HTTPS (TLS encryption). Database access is secured by API keys with minimal permissions. No unauthorised third-party access is possible within the architecture in place.