Privacy Policy
In accordance with EU Regulation 2016/679, known as the "European Regulation on the protection of personal data" (GDPR), we inform users that the personal data entered on the site are processed in the manner and for the purposes described below. For the processing of personal data under the law, any operation or set of operations carried out with or without the aid of electronic or automated means concerning the collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and distribution of data is meant. In compliance with the provisions of the new Regulation on the protection of personal data, the following is communicated:
Data Controller The Data Controller is Cristina Cressotti, based in Via Gardesana 338 - 37018 Malcesine VR, who will use the data for the purposes indicated below. For more information, you can contact us at the following email address:
Subject of the processing The personal and identification data (name, surname, email address, ...) we collect are provided by the user when requesting contact on the site www.welcomelakegarda.com
Purpose of the processing Personal data are processed for purposes related or instrumental to the activity of the concessionaire Cristina Cressotti, such as archiving in its databases or carrying out direct mail marketing activities. In particular:
With the express consent of the data subjects for receiving a message sent through the "Contact" form. When filling out the form, personal data (name and email address) are requested, with which the user will subsequently be identified to send a response to the indicated email address.
Processing methods Personal data are processed based on the principles of correctness, lawfulness, and transparency. Cristina Cressotti ensures that the processing of data carried out with or without the aid of electronic or automated means will take place using suitable tools to ensure the security and confidentiality of the data subject, through the use of appropriate procedures to avoid the risk of loss, unauthorized access, unlawful use, and dissemination, in compliance with the limits and conditions set by EU Regulation 2016/679. Personal data are subject to both paper and electronic and/or automated processing. The data are processed by our staff, where engaged in carrying out the mandate given to us.
Data access The subjects who may become aware of the user's personal data as controllers or processors (pursuant to Article 13(1) of the GDPR) are: The Data Controller The staff of the Data Controller, for the fulfillment of the user's requests Personal data will not be disclosed to third parties.
Data communication Data may be communicated to Supervisory Bodies, Judicial Authorities, and other third parties to whom communication is mandatory by law, including for the prevention/repression of any illegal activity related to access to the site and/or the sending of a request.
Data transfer The management and storage of personal data will take place on servers located in Italy of the Data Controller and/or third-party companies appointed as Data Processors. The data will not be transferred outside the European Union.
Data retention period Personal data of users of the site who send a request for information through the contact form will be kept for the time strictly necessary to fulfill the request, for the purposes outlined in point 3. Data collected for contact form submission activities will be entered into the company database and retained for the duration of the service, after which they will be deleted or anonymized within the times established by law. In case of withdrawal of consent to specific processing by the data subject, the data will be deleted or anonymized within 72 hours of receipt of the withdrawal. Pursuant to Article 13(2)(f) of the Regulation, it is informed that all data collected will not be subject to any automated decision-making process, including profiling.
Data subject rights Users can always exercise the rights set out in Articles 13(2), 15, 18, 19, and 21 of the GDPR, summarized here as follows:
- The data subject has the right to obtain confirmation of the existence of data concerning them, even if not yet communicated, and to have their communication in an intelligible form;
- The data subject has the right to request access to personal data, integration, rectification, deletion, or restriction of processing concerning them, or to object to their processing, as well as the right to data portability;
- The data subject has the right to lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the official website of the Authority at www.garanteprivacy.it;
- The exercise of rights is not subject to any form constraint and is free of charge. From the receipt of this informative communication, consent to the processing of personal data as described above will be deemed given.
Registration Form: REVA SNC for Villa Pifferi uses the following form to make your check-in experience easier and faster, collecting your personal data to fulfill the obligations required by law, such as:
- Guest reporting to the State Police (Alloggiati web)
- ISTAT presence communication
- Calculation and declaration of the tourist tax
- Issuance of the stay receipt or invoice
- Mandatory quarterly and annual declarations
For the sole purpose of fulfilling these obligations, Reva snc collects some personal data from you, such as:
- Name, Surname, Gender, Date of birth of the entire group
Identification of the main host:
- Identity document number (driving license or identity card)
- Place of issue of the document
- Photo of the document (if requested)
- Phone number or email (via a video/sms on WhatsApp or a phone call we will explain how to reach the property even outside Reception hours)
Exercise of rights Users can exercise their rights at any time by sending an email to
CONTATTA