Privacy notice

Last updated: 13 November 2026

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (the “Privacy Code”). It covers the viz.cc website, the requests you send us and stays in the apartments.

Who processes your data

The data controller is Vittorio Ziliani, a private individual who lets the apartments shown on this website for holiday purposes, not as a business.

• Email: holidays@viz.cc
• Postal address: [TO BE COMPLETED]

No data protection officer (DPO) has been appointed, as one is not required for this type of activity.

What data we process

Browsing the website. The website uses no cookies, no analytics and no advertising. It loads no third-party content (maps, videos, social media widgets): even the fonts are hosted on our own server. The server does not log visits. The hosting provider only processes the technical data strictly needed to deliver the pages, such as the IP address, for as long as strictly necessary.

Contact and booking requests. When you use the contact form or the booking form we process the data you enter: name, email, phone number (optional), dates, number of guests, apartment and message. At present the form prepares an email that is sent from your own email app: we only receive the data when you send it.

Communications. If you write to us by email or WhatsApp we process the content of your messages and the contact details you use.

Your stay. If you book, we also process:

• booking and payment details (amounts, dates, bank transfer details as they appear on the bank statement);
• the personal details and identity document data of the guests, which Italian law requires us to report to the police (Questura);
• the data needed for the tourist tax and for mandatory tourism statistics.

We do not process special categories of data (for example health data). If you share any spontaneously, for instance to tell us about an accessibility need or an allergy, we will use it only to organise your stay.

Why, and on what legal basis

• Replying to your requests and preparing a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Managing the booking, the stay, payments and assistance: performance of the rental contract (Art. 6(1)(b)).
• Reporting guests’ details to the police (Alloggiati Web, Art. 109 of the Italian Consolidated Law on Public Security), applying the tourist tax, providing statistical data, keeping tax records: legal obligation (Art. 6(1)(c)).
• Defending our rights in the event of a dispute: legitimate interest (Art. 6(1)(f)).

We do not use your data for newsletters or promotional messages. If we wish to do so in future, we will first ask for your specific consent, which you can withdraw at any time.

We make no decisions based solely on automated processing, and no profiling.

Is providing data mandatory?

To reply to you we need at least your name, email and message (the fields marked with an asterisk). The data required by law for your stay is mandatory: without it we cannot host you.

How long we keep it

• Requests that do not lead to a booking: up to 12 months after the last contact, then deleted.
• Bookings, payments and tax documents: for the period required by civil and tax law, as a rule 10 years.
• Data reported to the police: we do not keep copies of identity documents. We only keep the transmission receipts, for the period required by law.

When these periods end, the data is deleted or anonymised.

Who we share it with

Your data is never sold or published. It may only be received by:

• the technical providers we rely on, appointed as data processors: Infomaniak Network SA (server for the website and the management system, in Switzerland) and [TO BE COMPLETED: provider of the holidays@viz.cc mailbox];
• public authorities, where required by law (police, the municipality for the tourist tax, statistics bodies, tax authorities);
• our tax adviser, if any, for accounting obligations;
• the owner of the apartment, if different from the controller, only for the data needed to manage the stay;
• the cleaning staff, limited to arrival and departure dates.

If you book through Airbnb or Booking.com, those platforms process your data as independent controllers under their own privacy notices. The same applies to WhatsApp (Meta) if you choose to write to us there.

Transfers outside the European Union

The server is located in Switzerland, a country recognised by the European Commission as providing adequate protection (Art. 45 GDPR). If you write to us on WhatsApp, Meta may transfer data to the United States under the EU-US Data Privacy Framework.

Your rights

You can ask us at any time to access, rectify or erase your data, restrict its processing, receive it in a machine-readable format (portability) or object to processing based on legitimate interest (Articles 15–22 GDPR). Just write to holidays@viz.cc: we reply within one month.

If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live or work.

Changes

If we change the way we process data, for example when the forms start sending data directly to our management system, we will update this page and the date at the top.

In case of discrepancies between language versions, the Italian version prevails.