Effective Date: 21/05/2025
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), we inform you that the personal data you provide will be processed by:
Controller: Gaia Giammarino
Email: [email protected]
Website: https://fuerteventuravacationrentals.com/
We collect and process the following categories of personal data:
Identification data (e.g. first and last name)
Contact data (e.g. email address, phone number)
Booking information (e.g. date of stay, number of guests, payment details)
Technical data (e.g. IP address, browser type, operating system)
Communication content (e.g. messages or inquiries sent through forms or email)
Your data is collected:
Directly from you via our booking forms, contact forms, or email
Automatically through cookies and tracking tools (see our Cookie Policy)
Through third-party booking engines or platforms connected to Lodgify
We process your personal data for the following purposes and legal grounds:
Purpose | Legal Basis |
---|---|
To process bookings and payments | Performance of a contract (Art. 6.1.b GDPR) |
To respond to inquiries | Legitimate interest (Art. 6.1.f GDPR) |
To send service-related communications | Performance of a contract (Art. 6.1.b GDPR) |
To comply with legal obligations (e.g. tax, accounting) | Legal obligation (Art. 6.1.c GDPR) |
To improve our services and website performance | Legitimate interest (Art. 6.1.f GDPR) |
To send marketing communications (if explicitly consented) | Consent (Art. 6.1.a GDPR) |
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
Booking and transactional data: 10 years (in compliance with tax regulations)
Contact inquiries: up to 2 years
Marketing data: until you withdraw your consent
Cookies: as specified in our Cookie Policy
Your personal data may be shared with:
Lodgify (booking and property management platform)
Payment providers (e.g., Stripe)
IT service providers (hosting, security, email services)
Authorities when required by law
We ensure that all third parties respect the security of your data and comply with GDPR requirements. Where necessary, we enter into Data Processing Agreements (DPAs) with such providers.
Some of our service providers may process your data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as:
Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)
As a data subject, you have the following rights under the GDPR:
Right of access – obtain confirmation and access to your data
Right to rectification – request correction of inaccurate data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent at any time, where processing is based on consent
To exercise any of your rights, please contact us at: [email protected]
You also have the right to lodge a complaint with the Data Protection Authority of your country.
We implement appropriate technical and organizational measures to safeguard your personal data, including encryption, secure servers, limited access, and regular audits.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Our website may contain links to external websites. We are not responsible for the privacy practices or the content of such third-party sites.
We may update this Privacy Policy from time to time. Any changes will be published on this page with the new effective date.