PRIVACY POLICY

Dear Data Subject,

Villa Mamo has great respect for the privacy of its Users.
Any data communicated through the Website (described below) will be treated with the utmost care and with all instruments necessary to ensure its security, in full compliance with current legislation protecting data confidentiality. We inform you that the “European Regulation 2016/679 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data” (hereinafter “Regulation” or “GDPR”) establishes the protection of natural persons concerning the processing of personal data as a fundamental right. Therefore, pursuant to Article 13 of the GDPR, we inform you as follows.

1. WHAT IS VILLA MAMO

Villa Mamo is a design-led boutique rental villa based in Petrignano.

Federico Riezzo, in accordance with the GDPR, acts as the Data Controller with reference to the data communicated by Users while browsing the Website.

By accepting this privacy notice, the User acknowledges that their personal data may also be communicated to third parties, always for purposes connected to the provision of the services.

2. GLOSSARY

“Personal Data”: any information concerning an identified or identifiable natural person, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

“Villa Mamo”: the brand under which the Data Controller and its collaborators operate online commercial activities.

“Data Processor”: the natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Controller.

“Website”: this website operated by Federico Riezzo.

“Data Controller”: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“User(s)” and/or “Data Subject(s)”: the individual using this Website to whom the Personal Data refer.

3. CATEGORIES OF DATA

The Controller may collect from Users Personal Data and other information through the contact form on the Website (including, but not limited to: email address, first and last name).

The personal data processed may include:

a. Data provided in the Contact form
Villa Mamo will process the personal data the User provides to contact the property directly. Such data include contact details such as name, surname, address, email address, and other information voluntarily provided by the User. If the User authorizes it — or through the use of cookies — the Controller and its collaborators may store such data, in compliance with EU Regulation 679/2016 and for the purposes set out in this document. The Data Subject may request deletion of their personal data at any time.

b. Data collected automatically
The IT systems and software procedures used for the functioning of the Website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. These include IP addresses, domain names of the User’s computer, URI addresses of requested resources, the method used to submit the request to the server, the size of the response file, numeric codes indicating the server response status, and other parameters relating to the User’s operating system, browser, ISP, date and time of visit, referring and exit pages.

c. Data voluntarily provided by the User
The voluntary and explicit sending of emails to the addresses indicated on the Website entails the acquisition of the sender’s address and related data necessary to respond, as well as any other personal data included in the message. Such data are voluntarily provided and, by submitting the message, the User expressly accepts this policy.

d. Cookies
The Website uses cookies. Data collected may be used to access certain areas of the Website, for statistical purposes, or to make browsing more efficient and enjoyable.

e. Social Network Plug-ins
The Website may include plug-ins that allow easy sharing of content. These do not set cookies on page load. Cookies may be set if the User interacts with the plug-in. Data collection and use through plug-ins are governed by the respective social networks’ privacy policies.

4. SOURCE OF PERSONAL DATA

Personal Data are collected directly from the Data Subject through voluntary contact requests.

5. PURPOSE OF DATA PROCESSING AND LEGAL BASIS

1. Data provided in the Contact form
Purpose: User request
Legal basis: legitimate interest of the User.

2. Website maintenance and improvement
Purpose: use of aggregated and anonymous data to improve the Website
Legal basis: legitimate interest of the Controller.

3. Detect or prevent fraudulent activity
Purpose: detect, prevent, or stop fraudulent activities
Legal basis: legitimate interest of the Controller and legal obligation.

4. Compliance with judicial orders
Purpose: comply with legal obligations
Legal basis: legal obligation.

5. Data collected automatically
Purpose: ensure and improve service experience
Legal basis: legitimate interest of the Controller.

6. Data voluntarily provided by the User
Purpose: inherent to the request for which data are provided
Legal basis: User consent.

Providing Personal Data for the purposes under point 1 is necessary to allow the User to contact Villa Mamo. Without such data, this will not be possible.

6. DATA OF MINORS

The Controller does not collect data from minors under 14, in compliance with Italian law. Users providing false data release the Controller from liability, which also extends to parents or guardians. Parents who believe their minor has contacted Villa Mamo must notify the Controller for immediate deletion of the minor’s data.

7. DATA RECIPIENTS

User data may be communicated to Villa Mamo collaborators, consulting companies, hosting providers, and IT companies. Where they process data on behalf of the Controller, they will be appointed as Data Processors under Article 28 GDPR.

8. DATA TRANSFER OUTSIDE THE EU

Villa Mamo does not transfer collected data outside the EU.

9. DATA RETENTION PERIOD

In compliance with the GDPR:
a) contact data are processed for the time strictly necessary;
b) automatically collected data are processed for the time needed for statistical and security purposes;
c) voluntarily provided data are retained no longer than necessary or as required by Italian law.

10. RIGHTS OF THE DATA SUBJECT

The Data Subject may request access, rectification, deletion, restriction, objection, data portability, or withdrawal of consent by contacting the Controller. Complaints may also be lodged with a supervisory authority.

Requests must be sent to: ciao@villamamo.com.

11. METHODS OF DATA PROCESSING

Data will be processed in compliance with GDPR principles, using digital or paper tools, with appropriate security measures.

12. FINAL NOTES AND UPDATES

This notice applies only to the Website. It may be updated due to legal changes. Users are invited to review it periodically.

Last update: 10.12.2025