Privacy Policy

1. Who is responsible

Villa Rosa Tarvisio operates this website and decides how the personal information described here is used (the “data controller”).

• Address: Via Roma, 33018 Tarvisio (UD), Italy
• Contact: the inquiry form on our website (villarosa-tarvisio.com/rates)

The full registered legal name, legal form and tax or registration details of the operator are being confirmed and will be published in the Legal Notice. Until then, please use the email address above for any privacy request.

2. Information you send through the inquiry form

The inquiry form on the Rates page is the only form on this website. It contains the following fields:

• Full name (required)
• Email address (required)
• Phone with international prefix (required)
• Guests aged 13+ and children aged 0–12 (required; maximum 10 in total)
• Arrival and departure dates (required)
• Pets: yes/no (required)
• Discount code and message (optional)
• Privacy acknowledgment (required tick box)

An optional discount code is saved with your inquiry for the owner to review. It is not verified and does not automatically reduce the price.

When you submit, your inquiry and calculated price breakdown are stored securely with the hosting provider. The owner receives your details by email and a receipt is sent in your chosen language through Resend. Your email address is the Reply-To on the owner’s notification. Submission does not confirm a booking, reserve dates or create a Google Calendar event.

We do not sell information submitted through the form, and we do not use it for newsletters or unrelated advertising.

3. Why we use it and on what legal basis

When inquiry delivery is active, the details you send are used to:

• answer your questions
• prepare an accommodation offer for the dates you asked about
• communicate with you about availability and the details of a possible stay
• take the steps you request before a booking is entered into, and manage a reservation if one is later agreed

Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract, and performance of a booking contract.

Article 6(1)(c) GDPR applies where we must keep records to comply with a legal obligation, for example accommodation or tax obligations connected with a confirmed stay.

Article 6(1)(f) GDPR applies to the technical operation and security of the website, including preventing abuse of the form and keeping the site available.

4. Basic website statistics

This website runs on the Lovable platform, which provides basic built-in project analytics. According to the platform's documented functionality, these statistics may include aggregated information such as the number of visitors, page views, which pages were viewed, visit duration, bounce rate, traffic sources and device category.

We use this only to understand in general terms how the website performs. We do not build advertising profiles, we do not combine these statistics with inquiry details, and we do not identify individual visitors from them.

We cannot confirm from within this website whether the platform's measurement processes IP addresses or sets any identifier, so we make no claim that it is anonymous or cookie-free. The measurement is performed at platform level and cannot be switched off from inside this website. If you prefer not to be counted, you can use your browser's privacy settings or tracking protection.

Villa Rosa does not use Google Analytics, Meta Pixel, Hotjar, session recording, heat maps, advertising or remarketing scripts, or any other tracker. None of these are installed on this website.

5. Service providers and recipients

The following providers are technically involved in running this website:

• Lovable — hosting of the website and the built-in basic project analytics.
• Google Fonts — the typefaces used on this site are requested from Google's font servers, which means your browser's IP address and technical request data reach Google when a page loads.
• OpenStreetMap — the interactive maps load map tiles from OpenStreetMap servers, which likewise receive your IP address and technical request data when a map is displayed.

Lovable Cloud stores inquiries and email tasks; Resend delivers inquiry emails. Google Calendar is read server-side for availability; only occupied date intervals and freshness are public. No CRM or email-marketing service is used.

Booking.com, Instagram and Outdooractive are not processors acting for us. They are independent services that we simply link to. If you follow such a link, that provider's own terms and privacy policy apply to what happens there.

6. Transfers outside the European Economic Area

The hosting platform and the font provider are companies that may process technical data outside the European Economic Area, in particular in the United States. Where that happens, it takes place under the transfer mechanisms published by those providers in their own data-processing documentation.

We do not claim additional safeguards of our own. The precise processing locations and transfer mechanisms of the hosting and email providers are being verified and will be stated once confirmed.

7. How long information is kept

Submitted inquiries are stored securely to answer your request and maintain reliable email delivery.

Once inquiries reach us by email, the intended retention is up to 12 months after the last message exchanged, for inquiries that do not lead to a stay. Records connected with a confirmed booking, invoicing or an accommodation-law obligation are kept for the period required by the applicable Italian and EU rules; the exact statutory period is being verified with the operator's accountant and is not stated here as a fixed number until confirmed.

Basic website statistics are retained by the hosting platform under its own retention rules.

8. Your rights

Under the GDPR you can ask us to:

• give you access to the personal data we hold about you
• correct information that is wrong or incomplete
• erase your data where there is no longer a reason to keep it
• restrict how we use it while a question about it is resolved
• object to processing based on our legitimate interests
• provide the data you gave us in a portable format, where that right applies
• withdraw consent, where processing is based on consent — withdrawal is as easy as giving consent and does not affect what happened before

Write to the inquiry form on our website (villarosa-tarvisio.com/rates) and we will respond. You also have the right to complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your country of residence.

9. Required and optional information

In the inquiry form, only your name, your email address and the privacy acknowledgment are required — without them we cannot reply to you. Everything else is optional: leaving it out simply means our first answer will be less precise, and we may need to ask follow-up questions about dates or the number of guests.

10. Security

The website is served over an encrypted HTTPS connection, and the inquiry form includes a hidden anti-spam field that ordinary visitors never see or fill in. Access to the email address used for inquiries is limited to the people who run Villa Rosa.

No transmission over the internet and no form of storage can be made absolutely secure, and we do not promise absolute security.

11. Automated decisions, profiling and children

There is no automated decision-making with legal or similarly significant effects on this website, and we do not profile visitors.

This website is aimed at adults planning a stay. We do not knowingly collect information from children. If a child has sent us information, please write to the inquiry form on our website (villarosa-tarvisio.com/rates) and we will delete it.

12. Changes to this policy

We update this policy when the website changes — in particular when inquiry delivery is switched on. The date shown at the top of this page always reflects the current version. For any privacy question, write to the inquiry form on our website (villarosa-tarvisio.com/rates).