SECTION A – PRIVACY POLICY (#privacy)
1) Data Controller
The Data Controller is:
Cristina Bonavera Mellini
Email: info@villamontecristo.com
Phone: +39 339 3781680
2) Types of data processed
The Controller may process:
a) Data voluntarily provided by you
-
name and surname
-
email address
-
phone number
-
content of messages sent via form/email
-
stay-related information (dates, number of guests, preferences, special requests)
b) Browsing/technical data
When you browse the Website, technical data may be collected, such as:
-
IP address
-
browser/device type
-
visited pages and time spent
-
operating system/environment parameters
3) Purposes and legal bases
Personal data is processed for the following purposes:
-
Handling enquiries and contact requests
Legal basis: pre-contractual measures / request by the data subject (Art. 6(1)(b) GDPR) -
Managing bookings and stays
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) -
Legal and administrative compliance (e.g., tax/accounting obligations; legal requirements where applicable)
Legal basis: legal obligation (Art. 6(1)(c) GDPR) -
Protection of the Controller’s rights (complaints/disputes)
Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
4) Processing methods and security
Data is processed using electronic and/or paper-based tools, in accordance with GDPR principles (lawfulness, fairness, transparency, minimisation). Appropriate security measures are implemented.
5) Data recipients
Where necessary, data may be shared with:
-
IT/hosting and website maintenance providers
-
email and communication service providers
-
administrative/tax advisors
-
public authorities when required by law
Such entities act as Data Processors or independent Controllers, as applicable.
6) International data transfers
Some services may involve data transfers outside the EEA. Any such transfers will be carried out in compliance with GDPR using appropriate safeguards (e.g., adequacy decisions, Standard Contractual Clauses, or other permitted measures).
7) Data retention
Data is retained:
-
contact requests: as long as needed to manage the request, generally up to 12 months
-
contractual/administrative data: for the period required by applicable law
-
legal protection: as necessary within relevant limitation periods
8) Your rights
You may exercise your GDPR rights (Arts. 15–22), including access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent (where applicable).
Contact: info@villamontecristo.com
9) Complaints
You may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or with the authority in your EU country of habitual residence.
10) Minors
The Website is not intended for minors and does not knowingly collect minors’ personal data.
SECTION B – COOKIE POLICY (#cookie)
Last updated: [23/01/2026]
This Cookie Policy explains the use of cookies by www.villamontecristo.com (the “Website”) and how users can manage their preferences.
This information should be read together with the Website’s Privacy Policy.
1) Data Controller
For cookies installed directly by the Website (first-party cookies), the Data Controller is:
Cristina Bonavera Mellini
Email: info@villamontecristo.com
2) What cookies are
Cookies are small text files that websites send to your device (computer, smartphone or tablet) while you browse. Cookies are stored on your device and then sent back to the same website on subsequent visits.
Cookies can be:
-
First-party cookies, installed by the Website;
-
Third-party cookies, installed by third parties (e.g., Google).
-
3) Types of cookies used
The Website uses the following categories of cookies:
A) Essential (technical) cookies
These cookies are strictly necessary for the Website to function properly (e.g., security, session management, core functionalities).
They do not require your consent.
Legal basis: legitimate interest/technical necessity (Art. 6(1)(f) GDPR) and/or performance of a service requested (Art. 6(1)(b) GDPR).
B) Functional cookies
These cookies allow the Website to remember your choices and provide enhanced, more personalised features.
They are enabled only with your consent, via the cookie banner (Functional Cookies).
Legal basis: consent (Art. 6(1)(a) GDPR).
C) Analytics cookies
These cookies help us understand how visitors interact with the Website and improve performance and content (e.g., pages visited, session duration, events).
The Website uses:
-
Google Analytics 4 (GA4)
-
Wix built-in visitor analytics / traffic monitoring tools
They are enabled only with your consent, via the cookie banner (Analytics Cookies).
Legal basis: consent (Art. 6(1)(a) GDPR).
D) Marketing / profiling cookies
These cookies are used to measure advertising effectiveness and/or provide ads aligned with user interests.
They are enabled only with your consent, via the cookie banner (Marketing Cookies).
If no advertising tools are implemented, this category may not actually be used.
Legal basis: consent (Art. 6(1)(a) GDPR).
4) Consent management (Wix cookie banner)
When you first access the Website, a cookie banner allows you to:
-
Accept all cookies
-
Refuse all non-essential cookies
-
Customise preferences by category (Marketing / Functional / Analytics)
Non-essential cookies are not installed before your choice.
5) How to change preferences or withdraw consent
You may change your preferences or withdraw consent at any time via the “Cookie Settings” link/button available in the banner and/or footer (depending on Wix configuration).
6) Third-party cookies: Google Analytics 4
The Website uses Google Analytics 4, provided by:
-
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
and/or -
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Use of GA4 may involve data transfers outside the EEA, including to the United States. Any transfers are carried out using GDPR-compliant safeguards (e.g., Standard Contractual Clauses).
7) Google Maps
The Website includes an embedded Google Maps component to show the property’s location. Embedded third-party content may involve the collection of technical information and/or the installation of cookies by the provider, according to its own policies.
8) Social media links
The footer includes links to our official social pages (Instagram and Facebook). Simple links generally do not install cookies; however, cookies may be installed if embedded content (social widgets/embeds) is used.
9) Cookies list (Wix platform – essential cookies)
Since the Website is built and hosted on Wix, Wix platform cookies may be installed. The most common essential Wix cookies (indicative list based on Wix documentation) include:
Please note: the actual cookie list may vary depending on Website features enabled (apps, forms, languages, etc.).
10) Browser settings (delete/disable cookies)
You can also manage cookies through your browser settings. Disabling essential cookies may affect Website functionality.
Quick paths:
Chrome → Ctrl + Shift + Delete → “Cookies and other site data” → Clear data
Firefox → Ctrl + Shift + Delete → “Cookies” → Clear
Safari → Preferences → Privacy → Manage Website Data → Remove All
Edge → Ctrl + Shift + Delete → “Cookies and saved website data” → Clear
11) Contacts
For any requests regarding cookies or this Cookie Policy, please contact: info@villamontecristo.com
12) Updates
This Cookie Policy may be updated at any time. The latest version is always published on the Website and includes the update date.