Privacy Policy

This notice explains how Villa Grandiosa Costa processes the personal data of website users, under Regulation (EU) 2016/679 (GDPR).

Data controller

Villa Grandiosa Costa — Via Oliva S. Mauro 10, 95022 Aci Catena (CT), Italy — VAT 05787960870. Email: info@villagrandiosacosta.com.

Purpose and data processed

For booking management we collect the data you provide in the booking form: full name, email, phone, stay dates and details. The legal basis is the performance of the accommodation contract and related obligations (including payment). For the contact form we process the data needed to reply to your requests.

Data processors

To deliver the service we rely on providers that process data on our behalf:

• Stripe — credit card payment processing.
• PayPal — PayPal payment processing.
• Resend — transactional emails (booking confirmations).
• Aruba — website and bookings database hosting (EU datacenter).

Payment card data is processed directly by Stripe/PayPal on secure pages and never passes through or is stored by our systems.

Retention

Booking data is kept for as long as necessary to manage the stay and to comply with legal obligations (in particular accounting and tax requirements).

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection at any time by writing to info@villagrandiosacosta.com. You also have the right to lodge a complaint with the data protection authority.