Privacy & cookies
Notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). This is an informational website: it has no contact forms, requires no registration and uses no cookies or tracking tools.
Last updated: 2 October 2026
1. Data controllers
The site is shared by the two properties, both run by Catia and Andrea:
- Villa Ferrari Oriella di Righi Catia (B&B Villa Ferrari Oriella) — VAT no. 04058440365 — Property address: Via Statale, 89, 41014 Solignano Nuovo, Castelvetro di Modena (MO), Italia
- Andrea Affittacamere e B&B di Andrea Galletti (Andrea Affittacamere e B&B) — VAT no. 04076610361 — Property address: Via Statale, 93, 41014 Solignano Nuovo, Castelvetro di Modena (MO), Italia
Each controller processes the data of enquiries and stays relating to its own property; for the shared website and contact channels (e-mail, phone, WhatsApp) they act as joint controllers (Art. 26 GDPR). For any request to either controller: villaferrarioriella@gmail.com.
2. What data we process
- Browsing data: technical data logged by the hosting service (IP address, date and time, page requested, browser), needed to run and protect the site.
- Data you send us by phone, WhatsApp or e-mail: name, contact details, dates of stay, number of guests and any requests you write. If you tell us about a dietary need (e.g. gluten-free) we use it only to prepare your breakfast.
3. Purposes and legal bases
- Replying to your enquiries and managing your booking: pre-contractual measures and contract (Art. 6(1)(b) GDPR); for dietary needs, your explicit consent (Art. 9(2)(a)), given by telling us.
- Running and securing the website: legitimate interest (Art. 6(1)(f)).
- Legal obligations linked to your stay (tax and public-security rules): legal obligation (Art. 6(1)(c)).
- Google map (only if you load it): consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code).
Providing data is optional, but without contact details we cannot reply. We do not use your data for marketing and make no automated decisions.
4. Retention
Enquiries that do not lead to a booking are kept only as long as needed to reply and then deleted; data on stays is kept for the period required by law (e.g. 10 years for tax records). Browsing data is kept by the hosting provider for as long as needed for the security of the service.
5. Who may receive your data
- Cloudflare, Inc. — website hosting (processor).
- Google — Gmail e-mail service, if you write to us; Google Maps, if you load the map or open a Maps link.
- WhatsApp (Meta) — if you contact us on WhatsApp, under WhatsApp's privacy policy.
- Booking.com — if you use the “Book on Booking.com” links: from then on your data is processed by Booking.com as an independent controller.
- Authorities and bodies to which disclosure is required by law.
We do not sell or pass on your data to third parties.
6. Transfers outside the EU
Cloudflare, Google and Meta may also process data in the United States. Such transfers rely on the EU–US adequacy decision (EU-U.S. Data Privacy Framework) and/or the European Commission's standard contractual clauses.
7. Cookies
This site uses no cookies, first- or third-party, and no other tracking or analytics tools (no localStorage). Fonts and images are served from our own server, so no cookie banner is needed. Cloudflare may set, only when necessary, technical security cookies (e.g. against automated traffic), which do not require consent.
Google Maps: the map is not loaded until you press “Show the map”. Only then does your browser connect to Google, which may set cookies, including profiling cookies, under its own policy (policies.google.com/privacy). Your choice is not stored: on each visit the map stays off until you ask for it.
Links to WhatsApp, Booking.com and Google Maps lead to external sites with their own privacy policies.
8. Your rights
You can at any time request access to your data, rectification, erasure, restriction, portability, object to processing and withdraw any consent given (Articles 15–22 GDPR) by writing to villaferrarioriella@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country.
9. Changes
This notice may be updated; the date of the latest version is shown above.