Villa PatriziaSirtori

Privacy Policy

Last updated: 27 July 2026

Villa Patrizia Sirtori respects your privacy and is committed to protecting the personal data entrusted to us. This notice, drafted pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), describes what data we collect through this site, how we use it, and what rights you can exercise.

Data Controller

The Data Controller is Villa Patrizia Sirtori, based at Via Resegone 9, 23896 Bevera di Sirtori (LC), Italy. For any request regarding the processing of your personal data, you can write to info@villapatriziasirtori.it or call +39 338 725 4564.

What data we collect

We collect exclusively the data you voluntarily enter when filling out the forms on this site. We do not use profiling cookies or third-party tracking tools for advertising purposes.

  • "Request Information or a Quote" form: first name, last name, email, phone and, optionally, company, event type, number of guests, desired date and message.
  • "Book a Visit" form: full name, email, phone and, optionally, preferred day and time slot, and notes.
  • Menu download form: first name, last name, email and mobile number, used to send you a verification code (OTP) by email and let you download the menu PDF. If you tick the optional checkbox, the same data is also kept in order to contact you.

Purposes and legal basis of processing

Your data is never used for profiling purposes or to send unsolicited promotional communications.

  • Responding to information or quote requests and handling correspondence (legal basis: consent and performance of pre-contractual measures, Art. 6.1(a) and (b) GDPR).
  • Organising and confirming guided visits to the Villa (consent, Art. 6.1(a) GDPR).
  • Verifying your identity via OTP code and letting you download the PDF menu (consent, Art. 6.1(a) GDPR).
  • Sending you sample menus by email, only if you tick the relevant checkbox (consent, Art. 6.1(a) GDPR).
  • Contacting you about availability, proposals and events at the Villa, only if you ticked the relevant optional checkbox (consent, Art. 6.1(a) GDPR). This consent is free and optional: not giving it does not prevent you from downloading the menu, and you may withdraw it at any time by writing to info@villapatriziasirtori.it.

How and where we store your data

Data collected through the "Request Information or a Quote" and "Book a Visit" forms is sent by email to the Controller and is not stored in any site database: it remains solely in the Controller's mailbox.

Data collected through the menu download form is stored in a self-hosted database, installed on a server managed directly by the Controller, without any sharing with third-party cloud services. The OTP code is stored in encrypted form and is valid for 10 minutes; the PDF download link is valid for 60 seconds.

Emails (notifications and confirmations) are sent through the mail service of the provider register.it, which acts as data processor limited to the technical transit of messages.

Retention period

We retain your data for as long as necessary to handle your request and, absent further contact, for no longer than 24 months, unless you request earlier deletion or the law requires longer retention. You may request deletion of your data at any time by writing to info@villapatriziasirtori.it.

Disclosure and transfer of data

Your data is never sold, disclosed or shared with third parties for marketing purposes. We do not transfer data outside the European Economic Area, except as described in our Cookie Policy regarding Google Maps content, embedded on the Contact page only at your explicit request.

Your rights

As a data subject, you may at any time exercise the rights set out in Articles 15-22 of the GDPR, in particular:

  • Right of access: obtain confirmation of whether processing is taking place and receive a copy of your data.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): request deletion of your data.
  • Right to restriction: request restriction of processing in certain cases.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object at any time to the processing of your data.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

Minors

This site is not directed at minors under 16, and we do not knowingly collect data relating to minors.

Changes to this notice

This notice may be updated periodically to reflect regulatory or service changes. We invite you to check it regularly: the last-updated date is shown at the top of the page.

Cookies

This site uses a minimal number of cookies, all strictly technical. For more details, see our Cookie Policy.

To exercise your rights, write to info@villapatriziasirtori.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if you believe the processing violates applicable law: www.garanteprivacy.it