Privacy Policy

Villa Lorelei B&B ("we", "us", "our"), located at Via Partenope 36, 80067 Sorrento (NA), Italy, is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (EU 2016/679, "GDPR") and Italian data protection law (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).

The data controller is Villa Lorelei, Via Partenope 36, 80067 Sorrento (NA), Italy. For any questions regarding this privacy policy or your personal data, please contact us at [email protected].

We may collect the following categories of personal data:

• Contact information: name, email address, phone number (provided through our booking or contact forms)
• Booking information: dates of stay, room preferences, special requests
• Usage data: information about how you interact with our website, collected via Google Analytics 4 and Microsoft Clarity only with your explicit consent

We process your personal data for the following purposes:

• Processing and managing your booking requests
• Responding to your inquiries and providing customer support
• Sending booking confirmations and pre-arrival information
• Improving our website experience and services (only with your consent)

We process your data based on the following legal grounds:

• Contract performance: processing necessary to fulfill your booking request (Art. 6(1)(b) GDPR)
• Legitimate interest: responding to your inquiries and ensuring website security (Art. 6(1)(f) GDPR)
• Consent: analytics and tracking cookies are only activated with your explicit consent (Art. 6(1)(a) GDPR)

Our website uses cookies to function properly and, with your consent, to analyze site usage. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

We may share your data with the following third-party service providers, solely for the purposes described above:

• SendGrid: for email delivery of booking confirmations and inquiry responses
• Google Analytics: for website analytics (only with your consent)
• Microsoft Clarity: for website usage insights (only with your consent)

We do not sell, rent, or trade your personal data to any third party.

We retain your personal data for the following periods:

• Booking data: retained for 10 years as required by Italian tax law
• Contact form data: retained for 2 years from the date of your inquiry
• Analytics data: retained according to Google and Microsoft data retention policies

Under the GDPR (Articles 15-22), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data ("right to be forgotten")
• Request data portability
• Restrict or object to processing
• Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.