Price quote Call us

Privacy policy

Privacy Policy for Non-Hotel Accommodation

Privacy Policy regarding the processing of personal data (pursuant to Art. 13 of EU Regulation 2016/679)

Data Subjects: Website visitors and users.

This policy describes the methods for processing the personal data of users who consult the Hotel La Villa website, accessible at: https://www.alloggiareivrea.it

This information does not concern other sites, pages, or online services accessible via hyperlinks published on the site that refer to external resources.

1. Data Controller

The Data Controller is: SGS S.r.l. Via Torino 334, Ivrea (TO)

Email to exercise your rights: host@sgscorporate.it

2. Types of Data Processed and Purposes of Processing

a) Navigation Data

The computer systems responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes: IP addresses, domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters relating to the user’s operating system and IT environment.

  • Purposes of processing:
    • To obtain anonymous statistical information on the use of the site (most visited pages, number of visitors, etc.).
    • To monitor the correct functioning of the site.
    • To establish liability in the event of hypothetical cybercrimes against the site.
  • Legal basis: Legitimate interest of the Controller (Art. 6, par. 1, letter f) to keep the site functional and secure.
  • Retention period: Data is deleted immediately after processing in anonymous form, except for uses related to the investigation of crimes (for the time required by the Authorities).

b) Data voluntarily provided by the user

The optional, explicit, and voluntary sending of messages to our contact addresses, or the completion of information request or booking forms, entails the acquisition of the sender’s contact data (name, surname, email, telephone, etc.) and all personal data included in the communications, which are necessary to respond to requests or provide the service.

  • Purposes of processing: To manage and respond to user requests, provide information, and process booking or contact requests.
  • Legal basis: Execution of pre-contractual measures adopted at the request of the data subject (Art. 6, par. 1, letter b).
  • Retention period: Data is stored for the time necessary to process the request and, subsequently, for the period of time necessary to protect the Controller’s interests from any disputes (e.g., 2 years).

3. Legal Basis for Processing

Personal data is processed only when one of the following conditions exists (Art. 6 GDPR):

  • Consent: For specific purposes (e.g., newsletter subscription), where required.
  • Performance of a contract or pre-contractual measures: To manage your contact or booking requests.
  • Legal obligation: To comply with obligations provided for by law (e.g., storage of tax documents).
  • Legitimate interest: To ensure site security and improve our services (as described in point 2a).

4. Place of Processing and Data Recipients

Processing related to the web services of this site takes place in Italy and is managed by our specifically authorized internal staff. Data may be processed by third parties, designated as Data Processors (Art. 28 GDPR), who provide services instrumental to the purposes indicated above. In particular, we use:

  • Area38, for web platform maintenance and hosting services.

Data will not be disseminated to third parties.

5. Data Transfer Abroad

The management of the site and related services takes place mainly within the Italian territory. Any use of services with servers located outside the European Union (e.g., USA) occurs only toward countries that guarantee an adequate level of protection (adequacy decisions of the European Commission) or in compliance with appropriate safeguards, such as the adoption of Standard Contractual Clauses approved by the European Commission.

6. Cookies

This site uses technical and session cookies to ensure correct and secure navigation. For more information, please consult our Cookie Policy.

7. Rights of the Data Subject

At any time, you may exercise the rights provided by the GDPR (Articles 15-22) against the Controller, including:

  • Access: Obtain confirmation as to whether or not your data is being processed and receive information about it.
  • Rectification: Request the correction of inaccurate data or the integration of incomplete data.
  • Erasure (Right to be forgotten): Obtain the deletion of data if legal grounds exist.
  • Restriction: Obtain the restriction of processing in certain cases.
  • Portability: Receive data in a structured, readable format, or request its transfer to another controller (if technically feasible).
  • Objection: Object to processing based on legitimate interest, unless there are compelling legitimate grounds for the Controller.

To exercise your rights, you can contact the Controller at the email address: host@sgscorporate.it

8. Right to Complain

You have the right to lodge a complaint with the supervisory authority of the Member State in which you habitually reside, work, or the place where the alleged violation occurred. For Italy, the authority is the Garante per la protezione dei dati personali (website: www.garanteprivacy.it).

9. Updates

This policy may be subject to changes and updates. Please consult this page periodically to stay informed of any changes.

Ivrea, March 9, 2026