Privacy Policy

Last updated: 07 July 2026

At Villa Klint, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, make a booking inquiry, or otherwise communicate with us.

Who We Are

Villa Klint is the data controller for the personal data described in this Privacy Policy.

Controller:
Villa Klint Website: www.villaklint.com
Email: info@villaklint.com

If you have any questions about this Privacy Policy or how we handle personal data, you can contact us at info@villaklint.com.

Personal Data We Collect

We may collect and process the following types of personal data:

  • Contact details, such as your name, email address, phone number, and any information you choose to include when contacting us.
  • Booking and inquiry information, such as requested dates, number of guests, preferences, special requests, and other details related to your stay.
  • Payment and transaction information, where relevant, such as booking references, payment status, and invoice details. Payment card details are handled by our payment or booking providers and not stored directly by us.
  • Communication data, such as emails, messages, and other correspondence between you and Villa Klint.
  • Marketing preferences, such as whether you have subscribed to our newsletter or agreed to receive updates, offers, or information from us.
  • Technical and usage data, such as IP address, browser type, device information, pages visited, and cookie information when you use our website. Analytics data is collected only with your consent, as described below.
  • Special requests, if you choose to provide them, such as dietary, accessibility, allergy, or health-related information.

 

Why We Use Your Personal Data and Our Legal Bases

We process personal data only when we have a legal basis to do so.

To respond to inquiries and booking requests, we process contact details, booking information, and communication data. The legal basis is that the processing is necessary to take steps before entering into a contract or to perform a contract with you.

To manage bookings and provide our services, we process contact details, booking information, special requests, and relevant communication data. The legal basis is performance of a contract. Where special category data is provided by you, such as health-related or accessibility information, we process it only when necessary to handle your request and, where required, with your consent.

To communicate with you about your stay, we process contact details and communication data. The legal basis is performance of a contract or our legitimate interest in providing customer service.

To send newsletters, offers, or marketing updates, we process your email address and marketing preferences. Your email address is stored with our newsletter platform, Mailchimp (Intuit Inc., USA). The legal basis is your consent. You can withdraw your consent at any time by using the unsubscribe link in any email or by contacting us.

To understand how our website is used and improve it, we process technical and usage data using Google Analytics 4, loaded through Google Tag Manager — but only if you have consented to analytics in our cookie banner. The legal basis is your consent, which you can withdraw at any time via the “Cookie settings” link in the footer. Google Analytics 4 processes pseudonymous identifiers and usage data (such as pages visited, language, approximate location, and device type); it does not store full IP addresses. We keep this analytics data for 14 months and look at it only in aggregate, to improve the website. Until and unless you consent, these tools run in a consent-denied, cookieless mode: nothing is stored on your device and Google receives only anonymous signals.

To measure and run advertising, once our advertising campaigns run: we have prepared Google Ads and the Meta Pixel (Facebook/Instagram advertising) for future campaigns, but they are not yet active. Once campaigns run, and only if you have given marketing consent, these tools will measure our ads and show them to people who have visited our site. The legal basis is your consent, which you can withdraw at any time via the “Cookie settings” link in the footer. In addition, if you have subscribed to our newsletter and given marketing consent, we may then share a pseudonymised version of your email address (a hash — not the address itself) with Google to measure whether our ads led to signups. Without your marketing consent, this does not happen.

To keep our website secure, prevent misuse, and maintain basic functionality, we may process technical data. Our website is hosted by WP Engine, which processes the technical data your browser sends (such as your IP address) to deliver the pages you request and keep the site secure and available. The legal basis is our legitimate interest in ensuring website security and functionality.

To comply with legal obligations, such as accounting, tax, and bookkeeping requirements, we process relevant booking, payment, invoice, and transaction information. The legal basis is compliance with legal obligations.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the website work, remember your choices, and — with your consent — understand how visitors use the website and, once our advertising campaigns run, provide relevant marketing.

Necessary cookies are used because they are required for the website to function properly or to provide a service you have requested. This includes the first-party vk_consent cookie, which stores your cookie choice for 180 days so that the website can respect your decision.

Analytics, marketing, or other non-necessary cookies are only used after you have given your consent. When you first visit our website, a banner asks how you want us to handle cookies; accepting and rejecting are equally easy — the banner offers “Accept all”, “Reject all”, and “Preferences”, where you can allow analytics and marketing separately. Before you make a choice, no cookies requiring consent are set. You can withdraw or change your consent at any time through the “Cookie settings” link in the footer of every page, or through your browser settings.

For more information about the cookies we use, their purposes, storage periods, and how you can manage your choices, please see our [Cookie Policy].

Who We Share Personal Data With

We may share personal data with trusted service providers who help us operate our website, manage bookings, process payments, communicate with guests, or provide marketing tools. These include:

  • WP Engine — website hosting
  • Google Ireland Ltd — Google Analytics 4, loaded through Google Tag Manager (analytics, only with your consent), and Google Ads once our advertising campaigns run (only with your marketing consent)
  • Meta Platforms Ireland Ltd — advertising on Facebook/Instagram, once our advertising campaigns run (only with your marketing consent)
  • Mailchimp (Intuit Inc., USA) — newsletter
  • Booking platforms and payment providers
  • Email and communication tools
  • IT and security providers
  • Accounting, legal, or administrative service providers

We only share personal data when necessary and require our service providers to handle personal data securely and in accordance with applicable data protection law. We do not sell your data.

We may also share information when required by law, regulation, court order, or a competent authority.

International Transfers

Some of our service providers may process personal data outside the EU/EEA. Mailchimp is operated by Intuit Inc. in the USA; this transfer is safeguarded by the EU–US Data Privacy Framework and Standard Contractual Clauses. Google and Meta act through their Irish entities; where their processing involves transfers outside the EU/EEA, it takes place under appropriate safeguards, such as an adequacy decision by the European Commission, standard contractual clauses, or other safeguards required under applicable data protection law.

How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

  • Inquiry and communication data is normally kept for as long as needed to respond to your request and manage our relationship with you.
  • Booking and guest information is kept for as long as necessary to manage your booking, provide our services, handle any follow-up, and comply with legal requirements.
  • Accounting and transaction records are kept for the period required by applicable bookkeeping, tax, and accounting laws.
  • Newsletter data is kept until you unsubscribe or withdraw your consent.
  • Analytics data (Google Analytics 4) is kept for 14 months.
  • Your cookie choice (the vk_consent cookie) is kept for 180 days; after that, the banner asks for your choice again.
  • Technical and cookie data is kept according to the retention periods described in our [Cookie Policy].

We may keep certain information for a longer period if necessary to establish, exercise, or defend legal claims, or if required by law.

Your Rights

Under the General Data Protection Regulation, you have rights in relation to your personal data.

  • You have the right to request access to the personal data we hold about you.
  • You have the right to request correction of inaccurate or incomplete personal data.
  • You have the right to request deletion of your personal data in certain circumstances.
  • You have the right to request restriction of processing in certain circumstances.
  • You have the right to object to certain processing, including processing based on legitimate interests.
  • You have the right to data portability where the processing is based on consent or contract and carried out by automated means.

Where processing is based on consent, you have the right to withdraw your consent at any time — for cookies via the “Cookie settings” link in the footer, for the newsletter via the unsubscribe link in any email, or by contacting us. Withdrawal of consent does not affect processing that took place before consent was withdrawn.

You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it); if you live elsewhere in the EU/EEA, you may contact the supervisory authority of your own country.

To exercise your rights, please contact us at info@villaklint.com.

Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal data is limited to people and service providers who need it for the purposes described in this Privacy Policy.

Links to Other Websites

Our website may contain links to third-party websites, such as booking platforms, payment providers, social media pages, or other services. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing personal data to them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. The “Last updated” date at the top of this page shows when the policy was most recently updated.

Contact Us

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:

Villa Klint Email: info@villaklint.com
Website: www.villaklint.com