Villa Garden · Tropea
Booking privacy notice
How data submitted through the direct booking form is handled.
Data controller
Villa Garden di Maesano Maria Catena, Italian VAT number 02437710797, Gasponi di Drapia (VV), Calabria, Italy. Privacy contact: info@villagarden.eu.
Data and purposes
We collect first and last name, email, phone number, stay dates, number of guests, selected board, optional notes and information needed to manage the booking. We use these data to answer your request, conclude and provide the stay, manage payment, send confirmations and comply with legal obligations.
Legal bases
Processing necessary for the booking is based on steps prior to entering into a contract and performance of the contract (GDPR Article 6(1)(b)). Processing required by law is based on legal obligation (Article 6(1)(c)). The checkbox in the form acknowledges that you have read this notice; it is not consent to marketing.
Recipients and payment
Technical providers handling the website, hosting, booking system and communications may process the data, as may recipients required by law. Online payment is handled through PayPal: payment method details are entered into PayPal's service, not the Villa Garden form. PayPal processes data under its own privacy notice.
Retention
Booking data are retained for five years after the stay, unless a legal obligation requires a different period or retention is necessary to establish or defend a legal claim. Documents subject to tax obligations are retained for the period required by applicable law.
International transfers
PayPal may process or transfer data outside the European Economic Area to handle the payment. The safeguards used by PayPal, including binding corporate rules and standard contractual clauses where applicable, are described in its privacy notice.
Abuse prevention
We use Cloudflare Turnstile to protect the search form from automated requests. Cloudflare processes technical signals needed to distinguish people from bots; see the Turnstile privacy addendum. Our server validates the challenge result before searching.
Your rights
You may request access, rectification, erasure, restriction, portability or object to processing where provided by the GDPR, by writing to info@villagarden.eu. You may lodge a complaint with the Italian Data Protection Authority.
Required data
Fields marked as required are necessary to process the booking. Notes are optional. The form is not intended to collect health data or other particularly sensitive information.
Last updated: 21 September 2026.
