Villa Dantès
Privacy Policy
Draft — awaiting legal review. Items marked ‘To confirm’ must be resolved before final publication.
1. Identity and contact details
Villa Dantès is operated by the sole proprietorship Pizzeria Piscitelli di Piscitelli Francesco. Proposed point of reference for the data controller: Francesco Piscitelli. Registered office: Via Lombardia 29, 70026 Modugno (BA), Italy. VAT number: 08961530725. Tax code: PSCFNC85S27A662E. REA: BA-662890.
For privacy enquiries and rights requests: frenkpiscitelli@gmail.com. Certified email (PEC): frenkpiscitelli@pec.it. The registered office is separate from the villa address displayed elsewhere on this website.
To confirm before final publication: controller identity, actual roles and contractual arrangements.
2. Information enquiries and personal data
The website provides telephone links and email links in its legal information. There is no contact form. When contacting the property, you may provide contact details, your message and information about a stay. An email link opens your email application; the website does not collect that message through its own form.
The purpose is to answer enquiries and provide assistance. For enquiries about a stay, steps taken at your request before entering a contract may provide a basis under Article 6(1)(b) GDPR; the controller must verify its application to the actual processing. Special-category data is not requested through the website: please avoid sending unnecessary information.
To confirm: managed contact channels, email access, legal bases for non-contractual enquiries and operational procedures.
3. Bookings and KrossBooking
The website calendar lets you select dates and a guest count. The next step embeds the KrossBooking engine on riccardipropertiessrl.kross.travel and passes those dates and the guest count. The engine can also be opened through an external link. Final availability, terms, booking data collection and payments are handled there.
Opening external content connects to its provider, which receives technical data normally required to serve a page, such as an IP address and browser information. This website has no verified signal of a completed reservation or stay value for Analytics.
Managing a booking and stay may require processing for performance of a contract and legal obligations; the controller must document the applicable obligations. Read the information provided within the booking engine before entering personal data or making a payment.
To confirm: contractual KrossBooking provider, privacy roles, recipients, applicable notices, payment flows and retention periods.
4. Assistance and Riccardi Properties
Riccardi Properties S.R.L. handles development and digital management, online enquiries and guest assistance on behalf of the owner. Access to personal data must be limited to what is necessary for the actual assignment.
Riccardi Properties is not automatically described as a joint controller. Where it processes personal data on the controller’s behalf, the parties must assess and, where applicable, formalise a processor agreement under Article 28 GDPR, including instructions, security measures and subprocessor arrangements.
To confirm: contract, appointment, authorisations, tools used and allocation of responsibilities.
5. Google Analytics 4 and consent
Only after valid statistical consent does this website load Google Analytics 4 to measure page views and interactions: Book, telephone and email clicks, and entry to the booking engine. Consent is optional and can be withdrawn through Cookie preferences. A click is not a completed reservation.
The implementation uses Consent Mode v2 Basic: before consent it does not load the Analytics tag or send statistical requests to Google. Advertising signals remain denied. Website-defined events do not include names, email addresses, phone numbers, stay dates, guest counts, URL queries or fragments; they use public paths, language, link placement and action categories.
Connecting to Google may nevertheless involve technical data and identifiers required by its service. Please consult Google’s privacy information. Withdrawal stops subsequent website events and removes accessible Analytics cookies on its domain; it does not retrospectively erase data already received by Google.
To confirm in the Google account: contractual entity, retention, data sharing, enhanced measurement, processing terms and any international transfers.
6. Technical data, recipients and transfers
Technical connection data and error logs may be processed to deliver pages and support security. The website is built and hosted through Lovable; this draft does not claim to provide a complete inventory of providers or their logs. Categories requiring verification include hosting and technical support, digital management, bookings, payments, email and optional statistics.
Access must reflect actual roles, authorisations and appropriate safeguards. Any disclosures required by law must be identified by the controller. Processing countries and any transfers outside the European Economic Area must be verified, with the applicable safeguards specified; no particular certification or contractual clause is presumed.
To confirm: providers and subprocessors, technical logs, data locations, transfers and safeguards.
7. Retention
This draft does not set unverified retention periods. The controller must establish periods or criteria for enquiries, bookings, assistance, mandatory documentation, technical logs and Analytics data, limited to necessity and applicable obligations.
The statistical choice remains valid in the browser for no more than 180 days, unless withdrawn, deleted or invalidated earlier. The validity of this preference is not the retention period of data held by providers.
To complete: retention periods or criteria for each processing activity and the actual GA4 configuration.
8. Your rights and complaints
Where the GDPR conditions apply, you may request access, rectification, erasure, restriction, portability and objection. You may withdraw consent without affecting the lawfulness of earlier processing. Rights depend on the processing conditions and legal basis; a proportionate identity check may be needed.
Send requests to the contact details above. You may complain to the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or the competent supervisory authority. Declining Analytics does not prevent browsing the website or accessing bookings.