This privacy policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) to users who access and use the website www.thegreatesthouses.com (hereinafter, the “Website”), which allows users to submit accommodation requests for properties located in Italy.

1. Data Controller

The Data Controller is:

The Greatest Houses
Registered office: Località Bientini, 10 - 55011 Altopascio (LU)
Email for privacy-related requests: info@thegreatesthouses.com

2. Types of Personal Data Collected

This website collects and processes the following personal data:

• Identification and contact data: name, surname, email address, phone number.

• Booking request details: requested dates, number of guests, custom messages.

• Technical data: IP address, browser type, operating system, navigation data via technical or anonymized analytical cookies.

3. Purposes and Legal Basis of Processing

Collected data are processed for the following purposes:

• To respond to contact requests submitted via the contact form (Elementor Forms).

• To manage availability and booking requests via the dedicated form (VikBooking).

• To comply with legal or regulatory obligations.

• To ensure website security, including systems like Google reCAPTCHA.

4. Methods of Processing

Data are processed by electronic and manual means, in accordance with the principles of lawfulness, fairness, transparency, data minimization, integrity, and confidentiality.

5. Data Recipients

Personal data may be disclosed to:

• IT and technical service providers (e.g., hosting, website maintenance);

• Accommodation providers, exclusively for the purpose of responding to inquiries;

• Consultants or professionals acting on behalf of the Data Controller;

• Competent authorities, where required by law.

6. Data Retention Period

Personal data will be retained as follows:

• Inquiry-related data: for the time necessary to process the request and up to 12 months after the last communication;

• Marketing communications: until withdrawal of consent;

• Browsing data: for a maximum of 12 months.

7. Data Subject Rights

Users have the right to:

• Access to personal data (Art. 15 GDPR);

• Rectification of inaccurate data (Art. 16 GDPR);

• Erasure of data (“right to be forgotten”, Art. 17 GDPR);

• Restriction of processing (Art. 18 GDPR);

• Objection to processing (Art. 21 GDPR);

• Data portability (Art. 20 GDPR);

• Withdrawal of consent (without affecting the lawfulness of processing prior to withdrawal);

• Lodging a complaint with the competent Data Protection Authority.

8. Cookies

The Website uses technical cookies essential for its operation and, with user consent, third-party and profiling cookies. For more information, please refer to the Cookie Policy.

9. Changes to this Privacy Policy

This privacy policy may be updated. Users are encouraged to check this page periodically for any changes.

Last updated: April 9, 2025