Data Controller

The data controller responsible for processing personal data is the owner of Villa Altara.

Types of Data Collected

We process personal data provided during the reservation process, including:

• full name,
• contact details,
• booking information,
• payment-related data (according to Booking.com or Airbnb procedures).

Purposes of Data Processing

Personal data is processed for the following purposes:

• managing reservations,
• providing services during your stay,
• contacting guests when necessary,
• fulfilling legal obligations (including accounting and tax requirements),
• ensuring the safety and security of the property.

Legal Basis for Processing

Personal data is processed under:

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – legal obligation,
• Article 6(1)(f) GDPR – legitimate interest pursued by the property owner.

Data Sharing

Personal data may be shared with:

• external service providers supporting the property (such as cleaning companies),
• booking platforms such as Booking.com and Airbnb.

Villa Altara does not sell personal data to any third parties.

Data Retention

Personal data is stored for the period required by applicable laws, including financial and tax regulations, and for the time necessary to handle potential claims — no longer than necessary.

Guest Rights

Guests have the right to:

• access their personal data,
• rectify inaccurate data,
• request deletion of data,
• request restriction of processing,
• transfer their data,
• lodge a complaint with the appropriate data protection authority.

Contact for Privacy Matters

For any questions related to the processing of personal data, guests may contact us through the website’s contact form or via the messaging system on Booking.com or Airbnb.