This Privacy Policy describes how the website Villa Nunziatella Badia manages the processing of personal data of users who visit it. This information is also provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).
Data Controller
The Data Controller is:
Filippo Mangiapane
Contrada Badiella s.n.c.
90040 Trappeto (Palermo)
Email: nunziamangiapane67@gmail.com
Phone: +39 340 33 61 630
Types of Data Collected
Among the personal data collected by this website, either independently or through third parties, are:
- Usage data (pages visited, time spent, IP address)
- Cookies and tracking technologies
- Data voluntarily provided by the user (name, email, phone, messages)
- Booking data (stay dates, number of guests, preferences)
Purposes of Processing
Personal data is processed for the following purposes:
a) Management of booking requests
To process and confirm bookings, communicate information related to the stay, manage payments and provide pre and post-stay assistance.
b) Response to contact requests
To answer questions sent via the contact form or by email.
c) Legal obligations
To comply with Italian law obligations regarding tourist rentals, including communication of guest data to competent authorities.
d) Marketing (with consent)
To send newsletters, special offers and promotional communications, only with explicit consent.
e) Statistics and analysis
To analyze website usage and improve our services through tools like Google Analytics.
Legal Basis for Processing
- Contractual execution: to manage bookings and provide requested services
- Consent: for sending marketing communications
- Legal obligation: to comply with regulatory requirements
- Legitimate interest: for statistical analysis and service improvement
Data Retention Period
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and in any case no longer than the terms provided by law:
- Booking data: 10 years (tax obligations)
- Contact data for marketing: until consent is withdrawn
- Navigation data: 26 months (Google Analytics)
Data Communication and Disclosure
Personal data may be communicated to:
- Competent authorities (Police) as required by Italian law
- Technical service providers (hosting, email, analytics)
- Accountant for tax compliance
Data will never be disclosed or sold to third parties.
Rights of the Data Subject
In accordance with Articles 15-22 of the GDPR, you have the right to:
- Access your personal data
- Obtain rectification or deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Data Protection Authority
To exercise your rights, contact us at: nunziamangiapane67@gmail.com
Cookie Policy
For detailed information on the use of cookies, please see our Cookie Policy.
Changes to the Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time, informing users on this page. Please check this page periodically.
Last updated: January 2026