Privacy Policy

1. Controller

The controller under the GDPR is the operator of the Dolovilla holiday apartments:

• Name / company: [to be completed — e.g. first and last name or Dolovilla S.r.l.]
• Address: [to be completed — full postal address in Villanders, South Tyrol, Italy]
• Email: info@dolovilla.com

1a. Further details

Additional mandatory details (e.g. VAT number / Partita IVA, where applicable) are listed in our legal notice. Please send privacy enquiries to the email address above.

2. Overview of processing

We process personal data only where necessary to operate the website, handle bookings, comply with guest-registration law, or — with your consent — for analytics and marketing.

• Visiting the website (essential cookies, cookieless analytics)
• Online booking and payment
• Contact form enquiries
• Pre-arrival check-in for Alloggiati Web and tourist tax
• Optional: marketing emails (explicit opt-in only)
• Optional: Dolovilla Guest Club (free membership with an account)
• Optional: Google Analytics 4 (only after cookie consent)

3. Booking and payment

When you book through our website we collect data required for your stay (e.g. name, email, optional phone, travel dates, apartment, guest count, optional notes). Payment is processed by Stripe (Stripe Payments Europe Ltd.). Card data is handled solely by Stripe; we do not store full card details.

Booking and payment data are stored in Supabase (EU database). Legal basis: contract performance (Art. 6(1)(b) GDPR) and legal retention obligations (Art. 6(1)(c) GDPR).

We send booking confirmations and payment reminders by email via our email provider (e.g. Resend).

4. Contact form

If you contact us via the form, we process the data you provide (name, email, message) to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding).

5. Pre-arrival check-in (Alloggiati Web / tourist tax)

About seven days before arrival, confirmed guests receive a one-time link for digital check-in. We collect identity data required under Italian guest-registration law (Alloggiati Web) and tourist tax. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

This data is encrypted, used only for that purpose, and deleted after transmission to Alloggiati or after the statutory retention period. No user account is required.

6. Marketing emails and Dolovilla Guest Club

In the booking or contact form you may optionally consent to news and offers by email. This marketing consent is independent of club membership. Legal basis: consent (Art. 6(1)(a) GDPR). For website bookings, your email is forwarded to our CRM only after successful payment and only if the checkbox was selected. You may withdraw consent at any time via info@dolovilla.com.

The Dolovilla Guest Club is a separate, free membership. You create an account (email and password or magic link) and confirm your email (double opt-in). Members see exclusive offers after signing in. Club registration also includes consent to club news by email. Legal basis: consent (Art. 6(1)(a) GDPR) and contract performance for the club account (Art. 6(1)(b) GDPR). You may end membership and marketing consent at any time in the club profile.

7. Cookies and analytics

We use essential cookies for core site features (e.g. booking flow, language). They are required without consent.

For aggregate visitor statistics we use Vercel Web Analytics (Vercel Inc., USA). It is cookieless, does not build personal profiles, and does not require consent. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in improving the website.

With your consent via the cookie banner we additionally use Google Analytics 4 (Google Ireland Limited / Google LLC, USA). Legal basis: Art. 6(1)(a) GDPR. You can withdraw consent at any time via “Cookie settings” in the footer.

Data may be transferred to the USA under Standard Contractual Clauses. See also Google’s privacy policy.

8. Embedded content (Vimeo)

Some pages embed videos from Vimeo (Vimeo.com, Inc., USA). Playing a video may transfer data to Vimeo. We use the do-not-track parameter (dnt=1). Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in presenting our property; where required, consent via the cookie banner.

9. Processors and transfers

We use carefully selected service providers that process data only on our instructions:

• Supabase — database / hosting (EU)
• Stripe — payments (EU/USA, SCC)
• Vercel — hosting and web analytics (USA, SCC)
• Resend — transactional email (USA, SCC)
• Google — Analytics 4 (consent only; USA, SCC)
• Vimeo — video embeds (USA, SCC)
• Alloggiati Web — statutory guest registration (Italy)

10. Retention

We retain booking and invoice data for up to 10 years under Italian tax and commercial law. Check-in data is deleted after statutory transmission or at latest seven days after departure.

Server logs and anonymised access data at Vercel are kept only as long as needed for operation and security (typically a few days).

11. Your rights

You have the right of access, rectification, erasure, restriction, portability, and to object to processing based on Art. 6(1)(f) GDPR. You may withdraw consent at any time with future effect.

Contact info@dolovilla.com. You may also lodge a complaint with a supervisory authority — in Italy with the Garante per la protezione dei dati personali.

12. Changes

We update this policy when our processing or the law changes. The current version is always published on this page.