Privacy Policy

1. Introduction

Villa Europa ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy describes how we collect, use, and protect information when you visit our website or use our services.

By using our services, you consent to the data practices described in this policy.

2. Data We Collect

2.1 Personal Data

We may collect:

• Name, email address, and phone number
• Reservation and dining preferences
• Dietary requirements and allergy information
• Special occasion details
• Payment details (processed securely via third parties)

2.2 Automated Data

• Browser type and IP address
• Device information
• Site usage patterns
• Referral sources

2.3 Cookie Usage

We use different types of cookies:

• Essential: Required for site operation
• Analytics: Help us understand site usage
• Marketing: Enable personalized content

3. How We Use Your Data

• Managing reservations and bookings
• Providing customer support
• Accommodating dietary needs
• Sending booking confirmations
• Improving our services
• Marketing (with consent only)
• Legal compliance

4. Legal Basis (GDPR)

We process data based on:

• Contractual necessity: To provide services you've requested
• Consent: For marketing and optional features
• Legitimate interest: To improve and secure our services
• Legal requirements: To comply with laws and regulations

5. Data Sharing

We may share data with:

• Service providers: Payment processors, booking systems
• Legal authorities: When required by law
• Business successors: In case of merger or acquisition

We never sell your personal data to third parties.

6. Your Rights

Under GDPR, you have the right to:

• Access: Request your personal data
• Correction: Update inaccurate information
• Deletion: Request data removal
• Restriction: Limit processing of your data
• Portability: Receive data in a portable format
• Objection: Object to certain processing
• Withdraw consent: At any time

Contact us at [email protected] to exercise your rights.

7. Data Retention

We keep your data only as long as necessary for the purposes described, typically 3 years after your last interaction, unless required longer by law.

8. Security Measures

We protect your data through:

• SSL/TLS encryption
• Secure server infrastructure
• Regular security assessments
• Staff training and access controls

9. International Transfers

Data may be processed outside the EU. We ensure adequate protection through Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our services are not for individuals under 16. We don't knowingly collect children's data. Contact us if you believe we've collected such information.

11. Policy Updates

We may update this policy. Significant changes will be communicated through our website with an updated "Effective Date."

12. Contact Information

For privacy inquiries or to exercise your rights:

13. Supervisory Authority

EU/EEA residents may file complaints with their local data protection authority regarding our data processing practices.