Santa Maria Foris Privacy Policy

Last updated: June 18, 2025

This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 (GDPR), Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and all other applicable laws regarding the protection of personal data.

1. Data Controller

The Data Controller is:

S.M.F Srl
VAT No.: 02048670398
Email: info@villaforis.it
Website: www.villaforis.it

2. Types of Data Collected

This website may collect the following categories of personal data:

• Browsing data: IP address, browser type, device information, pages visited, access times and duration.

• Data voluntarily provided by the user: name, surname, email address, phone number, and any other information submitted via contact forms, booking requests, or email communication.

• Cookies: The site uses technical, analytical, and—subject to consent—profiling cookies. For more details, please refer to the [Cookie Policy].

3. Purposes of Data Processing

Personal data is processed for the following purposes:

• Managing requests for information or bookings;

• Fulfilling fiscal and accounting obligations;

• Anonymous statistical analysis on site usage;

• Sending promotional communications (with prior consent);

• Safeguarding the rights of the Data Controller.

4. Legal Basis for Processing

Data processing is based on:

• The execution of a contract or pre-contractual measures;

• Compliance with legal obligations;

• The user’s consent (where required);

• The legitimate interest of the Data Controller (e.g., fraud prevention, website improvement).

5. Processing Methods

Data is processed using electronic and/or manual tools with appropriate security measures to ensure confidentiality, integrity, and availability.

6. Data Retention

Data will be retained for as long as necessary to achieve the purposes for which it was collected, in compliance with applicable law. Data collected for marketing purposes will be retained for a maximum of 24 months.

7. Data Communication and Disclosure

Personal data may be communicated to:

• Employees and collaborators authorized to process data;

• Providers of technical and administrative services (e.g., hosting, email marketing);

• Accounting or legal consultants;

• Competent authorities, where required by law.

Data will not be disclosed to the public.

8. Data Transfer Abroad

Data is not transferred outside the European Economic Area. If such transfer becomes necessary, appropriate safeguards will be adopted in accordance with the GDPR.

9. Data Subject Rights

Users may exercise the following rights:

• Access to personal data;

• Rectification or erasure;

• Restriction of processing;

• Objection to processing;

• Data portability;

• Withdrawal of consent (without affecting the lawfulness of processing based on prior consent);

• Lodging a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Requests may be submitted via email to: info@villaforis.it

10. Changes to this Privacy Policy

This Privacy Policy may be subject to changes. Users are encouraged to review this page periodically.