Privacy policy
Last updated: 18 August 2026
Data controller
What we collect
We only collect what you send us yourself, through the contact form or the availability request:
- First and last name
- Email address
- Phone number, if you fill it in — the field is optional
- Intended dates and number of guests
- The message you write
No account is created, no password is asked for, and no payment details pass through this site: payments, when there are any, go through the booking platforms or directly between us. We collect no sensitive data within the meaning of the GDPR.
Purpose and legal basis
Who has access
Nobody but us makes use of it. Two technical providers process it on our behalf, within the scope of their work:
- Resend, our delivery provider: it carries your enquiries to our mailbox, without keeping them beyond delivery.
- Vercel, our host: enquiries pass through its servers, which keep a short-lived technical trace in their runtime logs.
- Google, for audience measurement — only if you accepted it, and never receiving the content of your messages.
These providers are established in the United States. Transfers outside the European Union rely on the European Commission's standard contractual clauses and on the EU–US Data Privacy Framework. The map on the villa page also loads its tiles from CARTO and OpenStreetMap, which therefore receive your IP address.
How long we keep it
Cookies and audience measurement
Your rights
The GDPR gives you the following rights, which you may exercise at any time:
- Access the data we hold about you
- Have it corrected if it is inaccurate
- Have it erased
- Restrict its processing
- Object to its processing
- Receive a copy in a readable format, to take elsewhere
- Withdraw your consent to audience measurement, without affecting what was done before
Write to us at contact@villa-zandoli.com. We answer within one month. We may ask you to prove your identity if genuine doubt remains, and only in that case.