Privacy Policy

This is a courtesy translation. The legally binding version is the Italian version.

The purpose of this document is to inform the natural person (hereinafter "Data Subject") about the processing of their personal data (hereinafter "Personal Data") collected by the data controller, Emilio Alfredo Lodigiani, Str. di Montevalle 397, 29010 Alseno PC, Tax Code LDGMLF78B28F205I, VAT Number 01862980339, email address emiliolodigiani@gmail.com, (hereinafter "Controller").

The Controller may modify or simply update, in whole or in part, this privacy notice, informing Data Subjects where necessary.

Categories of Personal Data processed

The Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

• Contact data: name, surname, address, email, phone number, images, authentication credentials, any additional information sent by the Data Subject, etc.
• Tax and payment data: tax code, VAT number, credit card details, bank account details, etc.

While the website is being browsed, the Controller also processes browsing data collected automatically (pages visited, where visits come from, technical data about the browser and device), for the statistics described below and in the Cookie Policy.

Failure by the Data Subject to provide Personal Data for which there is a legal or contractual obligation, or where it constitutes a necessary requirement for the conclusion of the contract with the Controller, will make it impossible for the Controller to establish or continue the relationship with the Data Subject.

The Data Subject who communicates third-party Personal Data to the Controller is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.

Legal basis and purposes of processing

The processing of Personal Data is necessary:

• for the performance of the contract with the Data Subject, specifically:
  • fulfilment of any obligation arising from the pre-contractual or contractual relationship with the Data Subject
  • support and contact with the Data Subject: to respond to the Data Subject's requests
  • payment management: to manage payments by credit card, bank transfer or other instruments
  • employee and collaborator management: to carry out all activities related to human resources organisation, such as recruitment, selection and payment of compensation
• for legal obligation, specifically:
  • compliance with any obligation under current regulations, laws and rules, particularly in tax and fiscal matters
• on the basis of the Controller's legitimate interest, for:
  • email marketing purposes for the Controller's products and/or services, to directly sell the Controller's products or services using the email provided by the Data Subject in the context of the sale of a product or service similar to that being sold
  • security and anti-fraud: to ensure the security of the Controller's assets, infrastructure and networks
  • first-party statistics: to improve the website and assess campaigns, the Controller records the pages viewed, the referring page, campaign parameters (UTM) and the ad click identifier, time on page and scroll depth, clicks towards the booking system and direct contacts, and newsletter sign-ups. Each event is linked to a random browser code (cookie montevalle_attr) or, when it is missing, to the site's technical session code, not to the person's name; the results are only consulted in aggregate form. The statistics do not store the IP address, only a code derived from it that changes every day; the IP address is instead kept, together with browser data, in the server-side record of the technical session until the session expires and is deleted. The data stays on the Controller's servers and is not shared with third parties
• on the basis of the Data Subject's consent, for:
  • marketing purposes for the Controller's products and/or services: to send commercial and/or promotional information or materials, to carry out direct sales of the Controller's products and/or services or to conduct market research using automated and traditional methods
  • statistics with Google Analytics: to understand how the website is used, through the Google Analytics service of Google Ireland Limited, which collects in pseudonymous form the pages viewed, where visits come from, interactions with pages (scrolling, clicks on external links, file downloads, form use, video views), approximate location (country, region, city) and technical data about the browser and device. The service is only activated if the Data Subject accepts statistics in the cookie banner (see the Cookie Policy)

The Data Subject's Personal Data may also be used by the Controller to protect itself in court before the competent judicial authorities.

Processing methods and recipients of Personal Data

The processing of Personal Data is carried out using paper and electronic tools with organisational methods and logic strictly related to the purposes indicated and through the adoption of adequate security measures.

Personal Data are processed exclusively by:

• persons authorised by the Controller who have committed to confidentiality or have an adequate legal obligation of confidentiality;
• entities that operate independently as separate data controllers or entities designated as data processors by the Controller in order to carry out all processing activities necessary to pursue the purposes of this privacy notice (for example, business partners, consultants, IT companies, service providers, hosting providers);
• entities or bodies to whom it is mandatory to communicate Personal Data by law or by order of the authorities.

The above-mentioned entities are required to use appropriate safeguards to protect Personal Data and may only access those necessary to perform their assigned tasks.

Personal Data will not be indiscriminately disclosed in any way.

Location

If necessary, Personal Data may be transferred to entities located outside the European Economic Area (EEA). Whenever Personal Data are to be transferred outside the EEA, the Controller will adopt every suitable and necessary contractual measure to ensure an adequate level of protection of Personal Data, including — among others — agreements based on the standard contractual clauses for the transfer of data outside the EEA, approved by the European Commission. To request information on the specific safeguards adopted, the Data Subject may contact the Controller at the following email address emiliolodigiani@gmail.com.

Personal Data retention period

Personal Data will be retained for the period of time necessary to fulfil the purposes for which they were collected, in particular:

• for purposes related to the performance of the contract between the Controller and the Data Subject, they will be retained for the duration of the contractual relationship and, after termination, for the ordinary limitation period of 10 years. In the case of legal proceedings, for the entire duration thereof, until the expiry of the time limits for filing appeals
• for purposes related to the Controller's legitimate interest, they will be retained until such interest is fulfilled
• for compliance with a legal obligation, by order of an authority and for legal protection, they will be retained in compliance with the deadlines provided for by said obligations, regulations and in any case until the expiry of the limitation period provided for by current regulations
• for purposes based on the Data Subject's consent, they will be retained until the consent is revoked; Google Analytics user-level and event-level data is retained by Google for the period set in the service, at most 14 months, while aggregated reports may remain available longer: withdrawing consent stops further collection but does not delete data already collected, which is kept until that period expires

At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.

Rights of the Data Subject

Data Subjects may exercise certain rights with regard to the Personal Data processed by the Controller. In particular, the Data Subject has the right to:

• be informed about the processing of their Personal Data
• revoke consent at any time
• restrict the processing of their Personal Data
• object to the processing of their Personal Data
• access their Personal Data
• verify and request the rectification of their Personal Data
• obtain the restriction of processing of their Personal Data
• obtain the deletion of their Personal Data
• transfer their Personal Data to another controller
• lodge a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.

To exercise their rights, Data Subjects may send a request to the following email address emiliolodigiani@gmail.com. Requests will be handled by the Controller immediately and fulfilled as soon as possible, in any case within 30 days.

Cookie Policy

This website uses cookies, i.e. small text files that are stored on the Data Subject's device to ensure the proper functioning of the site and improve the browsing experience.

Technical cookies (necessary)

These cookies are essential for the operation of the website and cannot be disabled. They do not require the Data Subject's consent pursuant to art. 122 of the Italian Privacy Code.

First-party statistics cookies

The website uses two of its own cookies for the first-party statistics described above. They are read only by the website's server, are not shared with third parties and are not used for advertising or profiling. The Data Subject can delete or block them in the browser settings without affecting the use of the website.

Third-party cookies (maps)

The website may embed interactive maps from Google Maps and OpenStreetMap (via Leaflet: the library and the marker icons are downloaded from unpkg.com and GitHub). These services may install their own cookies and collect browsing data (including IP address) according to their respective privacy policies. They are only activated with the Data Subject's prior consent via the cookie management banner.

• Google Maps: subject to Google's Privacy Policy. Data may be transferred to the USA.
• OpenStreetMap (tile server): subject to the OpenStreetMap Foundation Privacy Policy.

Third-party booking services (Guesty)

The availability search form and the accommodation photos are provided by Guesty, the Controller's booking system: the form is downloaded from s3.amazonaws.com (Amazon Web Services) and queries app.guesty.com, and the photos are loaded from assets.guesty.com. To display them, the browser sends these services the IP address and technical browser data, even without consent, because they are needed to view the accommodation and to book. The form sets no cookies, but it saves a copy of its own configuration in the browser's local storage (localStorage), which does not identify the visitor. Data may be transferred outside the EEA and is processed under Guesty's Privacy Policy.

Third-party statistical cookies (Google Analytics)

The website uses Google Analytics, an analytics service provided by Google Ireland Limited, to understand how the website is used: it collects in pseudonymous form the pages viewed, where visits come from, interactions with pages (scrolling, clicks on external links, file downloads, form use, video views), approximate location (country, region, city) and technical data about the browser and device. Google Analytics cookies are only installed with the Data Subject's prior consent, given by enabling "Statistics" in the cookie management banner. The IP address is transmitted to Google, which does not associate it with user identifiers and discards it after use: for visitors from the EU, Switzerland and the UK it is used only to derive the approximate location; for other visitors it is also used to detect and filter out spam traffic. User-level and event-level data is retained by Google for the period set in the service, at most 14 months; aggregated reports may remain available longer. Data may be transferred to the United States to Google LLC, on the basis of the EU-U.S. adequacy decision (EU-U.S. Data Privacy Framework), in which Google participates.

• Google Analytics: subject to Google's Privacy Policy. The Data Subject can also prevent data collection by installing the Google Analytics opt-out browser add-on.

Managing preferences

The Data Subject may at any time change their cookie preferences via the "Cookie Settings" link in the website footer, or by configuring their browser to refuse all or some cookies. When consent to statistics is withdrawn, Google Analytics is disabled and its cookies are deleted from the browser; data already sent remains with Google until the retention period stated above expires.

Last updated: 02/10/2026