Privacy policy

1. Data controller

Riverton SRL, registered office Via Belfiore 5, 20145 Milan, Italy, VAT IT14937520964, which operates Villa San Giuseppe, Via Ottaviano 59, Brindisi.

For any privacy request: info@villasangiuseppebrindisi.it, phone +39 351 675 9793.

2. What data we collect

• Puglia Week booking data: name, email, phone, chosen week, number of guests, special requests, language and where your visit came from (for example the ad campaign that brought you here).
• Participant details, which you can add after payment: first and last name, date of birth, nationality, ID document number, emergency contact and any dietary needs. Dietary needs may reveal health information: we use them only to prepare meals and only if you tell us.
• Payment data: card payments are handled by Stripe. We receive the outcome, the amount and a transaction reference, never your full card number.
• Contact data: whatever you send us by email, phone or WhatsApp.
• Browsing data: IP address, device and browser type, pages visited, collected for technical and statistical purposes.

3. Why we use it and on what legal basis

• Managing your booking, deposit and balance payments, any refunds and your stay: performance of a contract (Art. 6.1.b GDPR).
• Sending you the confirmation email and messages about your booking: performance of a contract.
• Registering guests with the authorities as required for accommodation providers and meeting tax obligations: legal obligation (Art. 6.1.c).
• Answering your enquiries: pre-contractual steps or your interest in a reply.
• Measuring the performance of our Facebook and Instagram ads: only with your consent (Art. 6.1.a), which you can withdraw at any time.
• Protecting the site from abuse and fraud: legitimate interest (Art. 6.1.f).

4. Cookies and Meta Pixel

The site uses technical cookies needed for it to work, for example to remember your cookie choice and language. These do not require consent.

On The Puglia Week page we use the Meta Pixel by Meta Platforms Ireland Ltd. It only loads if you click “Accept” in the banner. Meta then receives information about your visit and the actions you take (page view, starting a booking, submitting a booking, paying the deposit and its amount), together with browser identifiers and IP address. We use this to know how many bookings come from our ads and to show them to the people most interested. We do not send Meta your name, email or phone.

If you click “Decline” the pixel is not loaded. You can change your mind at any time by clearing this site's data in your browser: the banner will appear again on your next visit. Meta also processes this data as an independent controller under its own policy (facebook.com/privacy/policy).

5. Who we share data with

Only with the providers we need to deliver the service, acting as processors or independent controllers:

• Stripe Payments Europe Ltd, for card payments.
• Resend, for sending confirmation emails.
• Lovable and its hosting and database providers, to run the site and store bookings.
• Meta Platforms Ireland Ltd, only with your consent, for ad measurement.
• WhatsApp (Meta), if you choose to message us there.
• Tax advisers and public authorities, where required by law.

6. Transfers outside the EU

Some providers may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.

7. How long we keep it

• Bookings, payments and accounting records: 10 years, as required by tax law.
• Participant details and documents: for the stay and related legal requirements, then deleted.
• Enquiries without a booking: up to 24 months.
• Meta Pixel data: according to Meta's retention, and no longer than 2 years on our side.

8. Your rights

You can ask us at any time to access, correct or delete your data, restrict its use, receive it in a portable format, object to processing based on legitimate interest and withdraw consent, without affecting processing carried out before withdrawal. Write to info@villasangiuseppebrindisi.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or your local authority.

9. Children

Details of minors taking part in The Puglia Week are provided by the parent or the person booking, who confirms they are authorised to do so. We never use them for advertising.

10. Changes

We may update this notice. The date of the latest change is shown at the top.