Privacy Policy of www.villagardalake.com
Last updated: 28 August 2026
Data Controller
The Data Controller for the personal data collected through www.villagardalake.com is:
ZERO EMISSION ENERGY SOLUTIONS SRL
Via S. Urbano 2
39040 Ora (BZ), Italy
VAT No. 03299200216
Email: info@zero-emission.it
For information regarding stays at Villa Colli Storici:
booking@villagardalake.com
Types of data collected
The following categories of personal data may be collected through this website.
Data voluntarily provided by the user
When users submit an information request or a stay enquiry through the contact form, the following data may be collected:
- first and last name;
- email address;
- telephone number;
- expected arrival date;
- expected departure date;
- number of adult guests;
- number of children under 12;
- any requests or information voluntarily entered in the message field.
Users are advised not to enter special categories of personal data pursuant to Article 9 GDPR in the free-text field unless strictly necessary for their request.
Browsing data
During normal browsing, technical data may be processed automatically, including:
- IP address;
- browser and device type;
- operating system;
- date and time of the request;
- pages visited;
- technical information relating to the connection;
- usage data;
- information contained in server logs;
- data relating to tracking technologies used by the website.
Purposes and legal bases of processing
Management of stay enquiries and information requests
The data entered in the form is processed in order to:
- respond to users’ requests;
- check the dates and details of the requested stay;
- prepare and send an offer;
- manage subsequent communications;
- take pre-contractual measures requested by the data subject.
Legal basis: performance of pre-contractual measures taken at the request of the data subject pursuant to Article 6(1)(b) GDPR.
The data is retained for the time necessary to handle the request and, subsequently, for the period strictly necessary to protect the rights of the Data Controller.
If the request results in a booking or contractual relationship, the data required for administrative, tax and accounting obligations may be retained for the periods required by applicable law.
Communications with the user
The email address and telephone number provided are used exclusively for communications relating to the user’s enquiry, the stay and any related services.
Data collected through the form is not used for newsletters or promotional communications without separate and specific consent.
Security, spam and abuse prevention
The website uses Google reCAPTCHA to protect forms against spam, bots, automated access and other abusive uses.
The service may process technical information relating to the device, IP address, browsing and user interaction, and may use cookies or other tools required for risk analysis.
Legal basis: legitimate interest of the Data Controller in protecting the website, its infrastructure and preventing fraudulent or abusive use, pursuant to Article 6(1)(f) GDPR.
Provider: Google Ireland Limited and/or Google LLC.
Google reCAPTCHA may use the _GRECAPTCHA cookie for risk analysis.
Statistics – Google Analytics 4
The website uses Google Analytics 4, a traffic measurement and analysis service provided by Google.
Google Analytics enables the Data Controller to obtain statistics concerning website usage, such as the number of users and sessions, pages viewed, interactions, technical information about devices and the approximate origin of traffic.
Google Analytics 4 may use tracking technologies and first-party cookies, including _ga and _ga_<container-id>.
Purpose: traffic measurement, statistical analysis and analysis of website usage.
Legal basis: user consent pursuant to Article 6(1)(a) GDPR, unless the service is configured in a manner that fully meets the legal requirements for analytics tools to be treated as technical cookies.
Provider: Google Ireland Limited and/or Google LLC.
The retention period for user-level and event-level data may be configured within Google Analytics.
Tag management – Google Tag Manager
The website uses Google Tag Manager, a service that enables the centralised management of tags, scripts and third-party or measurement services used on the website.
Google Tag Manager may involve the processing of technical and usage data necessary to provide the service.
The legal basis and whether consent is required depend on the type of tag executed through Google Tag Manager. Statistical, advertising or otherwise non-essential services are therefore managed according to the preferences expressed by the user.
Provider: Google Ireland Limited.
Display of external content – Google Maps
The website embeds Google Maps to display the location of Villa Colli Storici.
When the map is loaded, the user’s browser establishes a connection with Google’s servers. Google may therefore receive technical information including the IP address, browser information, device information and the page visited, and may use cookies or other tracking technologies.
Purpose: displaying the geographical location of the property and enabling map functionality.
Legal basis: user consent where the service involves the use of non-essential tracking technologies.
Provider: Google Ireland Limited and/or Google LLC.
Language preference management – Polylang
The website uses Polylang to provide its pages in multiple languages.
The service may use a technical cookie named pll_language to remember the language selected by the user and display the requested language version correctly.
Purpose: storing the user’s language preference.
Legal basis: technical necessity for the correct provision of the functionality requested by the user.
Legal obligations
Data may be processed where necessary to comply with obligations imposed by laws, regulations, tax or administrative provisions or requests from competent authorities.
Legal basis: compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
Establishment, exercise or defence of legal claims
Data may be retained and processed where necessary to establish, exercise or defend a right of the Data Controller in judicial or extrajudicial proceedings.
Legal basis: legitimate interest of the Data Controller pursuant to Article 6(1)(f) GDPR.
Processing methods
Personal data is processed using IT and electronic systems and appropriate technical and organisational measures are adopted to prevent loss, unauthorised access, disclosure, alteration or unlawful use.
The Data Controller processes personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation and storage limitation.
Recipients of personal data
Personal data may be processed or disclosed, within the limits of their respective functions, to:
- authorised personnel and collaborators of the Data Controller;
- hosting, server, infrastructure and email service providers;
- parties responsible for technical maintenance of the website;
- IT service providers;
- Google Ireland Limited and related companies in connection with the Google services used;
- administrative, tax and legal advisers;
- public authorities where required by law.
Where required by law, parties processing personal data on behalf of the Data Controller are appointed as Data Processors pursuant to Article 28 GDPR.
Personal data is not sold to third parties.
Transfers outside the European Economic Area
The use of international providers, particularly Google services, may involve processing or transfers of personal data to countries outside the European Economic Area.
Where applicable, such transfers are carried out using the safeguards provided for by the GDPR, including adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.
Data relating to minors
The website is not directly intended for minors.
The enquiry form only asks for the number of children under the age of 12 who would be taking part in the stay. No names, contact details or other identifying information relating to minors are requested.
Provision of data
Providing the data marked as mandatory in the form is necessary in order to allow the Data Controller to respond to the request and prepare an offer relating to the stay.
Failure to provide such data may make it impossible to provide the requested service.
Rights of the data subject
Where applicable, data subjects may exercise the rights provided for under Articles 15–22 GDPR, including the right to:
- obtain confirmation as to whether personal data concerning them is being processed;
- access their personal data;
- request rectification or updating;
- request erasure;
- request restriction of processing;
- object to processing where applicable;
- request data portability where applicable;
- withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to:
ZERO EMISSION ENERGY SOLUTIONS SRL
Email: info@zero-emission.it
Data subjects also have the right to lodge a complaint with the competent Data Protection Authority.
Changes to this Privacy Policy
The Data Controller reserves the right to update this Privacy Policy as a result of regulatory, technical or organisational changes or changes to the services used by the website.
The updated version will be published on this page together with the date of the latest revision.