Privacy & Cookie Policy – Villa Sofia (updated 2026)

Pursuant to EU Regulation 2016/679 (GDPR), the data controller is:
Villa Sofia
Address: Via Lissolo, 9 - 23896 Sirtori (Lecco)
Privacy email: info@villasofiaitaly.it
Owner: Natalia Scarinci

2. Data collected
We only collect the data you voluntarily provide via the contact form: first and last name, email, phone number, message. We do not collect sensitive, geolocation, or automatic browsing data.

3. Purpose of the processing
The data is used exclusively for:

• Respond to your requests and provide information about events, photoshoots, or stays at Villa Sofia.

• Manage quotes and preliminary contacts for bookings.
  We do not use them for marketing, newsletters, profiling, or advertising.

4. Legal basis
Processing is based on your consent, implied by submitting the form (Article 6(1)(b) GDPR, implementation of pre-contractual measures) and on our legitimate interest in responding (Article 6(1)(f) GDPR). You can revoke your consent at any time.

5. Conservation
We retain your data for 12 months from your request, or until you explicitly delete it. We then securely delete it. We do not transfer data outside the EU.

6. GDPR Rights
You can: access, rectify, delete, and restrict your data; object to processing; withdraw consent; and receive data in portable format.
Write to villasofiaitaly@gmail.com . We will respond within 1 month. You can file a complaint with the Privacy Guarantor ( www.garanteprivacy.it).[3 ]

7. Security
We use technical measures (secure servers, limited access) to protect your data. The site is on a compliant platform (e.g., Wix with GDPR tools).

Cookie Policy
We only use technical cookies necessary for the site's operation (navigation, forms). No profiling, analytics, or marketing cookies.

• Technical cookies: sessions and basic preferences (duration: session or max 12 months).

• Third parties: none (no Google Analytics, Meta Pixel, embedded maps with tracking).
  Manage everything from your browser (Chrome: Settings > Privacy > Cookies). There's no banner because technical consent isn't required.

Updated March 2026. Contact us with questions.