PRIVACY POLICY

1. Controller (Data Protection Contact)

This website and the related booking communication are operated by Villa Sessana (private owners).

Contact: villasessana@gmail.com
Correspondence address:

c/o Thomas Ehgartner

Kothingbuchbach 2, 84568 Pleiskirchen, Germany

​

2. What personal data we process and why

We process personal data when you visit our website, contact us, or book a stay.

a) When you contact us

If you contact us by email or via a contact form, we process the data you provide (e.g. name, email address, phone number and message content) in order to respond to your inquiry and communicate with you.

b) When you book a stay

When managing a reservation, we process booking-related data (e.g. names of guests, stay dates, contact details, payment status and any preferences you share with us).
This processing is necessary to manage the booking, prepare check-in, provide guest support and comply with legal obligations.

c) Technical website data

When you visit our website, certain technical data may be processed automatically (e.g. IP address, browser type, device information, date and time of access, referring URLs).
This data is used to operate, secure and technically optimize the website.

​

3. Legal bases for processing (GDPR)

Personal data is processed on the following legal bases:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures (e.g. inquiries and bookings)

• Art. 6(1)(c) GDPR – compliance with legal obligations

• Art. 6(1)(f) GDPR – legitimate interests (secure website operation, communication, fraud prevention)

• Art. 6(1)(a) GDPR – consent, where required (e.g. marketing technologies)

 

4. Cookies and marketing technologies

a) Necessary cookies

We use technically necessary cookies that are required to operate the website and provide core functionality. These cookies do not require consent.

b) Marketing cookies – Meta Pixel (Facebook / Instagram)

We use the Meta Pixel to measure the effectiveness of advertising and to build audiences for marketing purposes on Facebook and Instagram.

Marketing cookies and similar technologies are only activated after you have given your consent via our cookie banner.

Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square, Dublin 2, Ireland

​

c) Managing or withdrawing consent

You can give, refuse or withdraw your consent at any time via the cookie settings on our website.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

​

5. Recipients and service providers

We may share personal data with trusted service providers who support us in operating the website and managing bookings, such as:

• website hosting and technical service providers

• email and communication service providers

• marketing service providers (only where consent has been given)

Where necessary for your stay, relevant booking details may be shared with our local property manager for purposes such as check-in coordination and guest support.

 

6. International data transfers

Some service providers (e.g. Meta) may process data outside the European Union / European Economic Area.
Where such transfers occur, appropriate safeguards are used (such as EU Standard Contractual Clauses).
Marketing-related processing only takes place where consent has been given.

 

7. Data retention

We store personal data only for as long as necessary:

• inquiry data: until the inquiry is resolved or a booking follows

• booking data: for the duration of the contractual relationship and as required by statutory retention obligations

• consent data (cookie consent): for documentation and compliance purposes

 

8. Your rights as a data subject

Under the GDPR, you have the right to:

• access your personal data

• rectify inaccurate or incomplete data

• request erasure (where legally permissible)

• restrict processing

• object to processing based on legitimate interests

• data portability (where applicable)

• withdraw consent at any time

To exercise your rights, please contact us at villasessana@gmail.com.

 

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA country of your habitual residence, place of work or the place of the alleged infringement.

 

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time.
The date at the top of this page indicates the current version.