Last updated: 28 October 2026.
Controller and contact
The controller for personal data collected through this website is Ing. Giorgio Broggi, Via Novara 38, 28016 Orta San Giulio (Novara), Italy. The accommodation’s national identification code (CIN) is IT003112C2L7M2HAGX. For privacy requests, email villavolpeorta@gmail.com.
Booking enquiries
When you submit a booking request, we process the name, email address, phone number, requested stay dates, party size, pet information and any message you choose to provide. We use this information to answer the enquiry, check availability, prepare a quote and take steps requested before a possible booking contract. If a booking is confirmed, some information may also be kept to meet accounting, guest-registration and other legal obligations.
Please do not include health information, identity documents, payment-card details or other sensitive information in the free-text field.
To keep the booking form free of spam, it uses Cloudflare Turnstile, which checks that the request comes from a person and not from an automated program.
Instagram comments and messages
When you comment on a post of our Instagram account @villavolpe or send it a direct message, Meta makes available to us your Instagram username, the text and the time of the comment or message. We use them to reply: we may leave a short reaction under your comment and, if you ask about a stay, prices or availability, we may write to you in a private message with the link to our booking page. If you ask about a specific stay, we record your request (username, dates, number of guests and message) in our booking management system so that we can follow it up.
To understand the language and the type of a comment or message (for example a question, a compliment or spam), its text may be read with the help of Claude, an AI service provided by Anthropic. Only the text is shared, not your username. Replies are prepared from texts we have written and approved; no decision with legal or similarly significant effects is taken automatically.
We do not reply automatically to negative comments and we do not use Instagram data for advertising.
Service providers and access
The website is hosted through GitHub Pages. Booking requests and guest management run on our own management application, hosted by Vercel with a database provided by Neon in the European Union (Frankfurt). We also use Google services (Gmail and Calendar), Cloudflare (Turnstile), Meta (Instagram) and Anthropic (Claude). These providers process information under their own data-protection terms and may process data outside the European Economic Area using the transfer safeguards they make available. Access to booking information is limited to people who need it to manage the property and guest stay.
Analytics and cookies
This website uses Google Analytics 4 to understand how visitors use it (pages viewed, approximate location, device and the source of the visit) and to count booking requests sent. Google Analytics sets cookies in your browser for this purpose. We do not use the data to identify you or for advertising.
You can block or delete these cookies in your browser settings, or use the Google Analytics opt-out browser add-on. The site works normally without them.
Retention
Unconfirmed enquiries, Instagram comments and messages are retained only for as long as reasonably needed to respond, prevent duplicate or abusive submissions, and manage follow-up. Confirmed booking and accounting records may be retained for the periods required by Italian law. Analytics retention follows the configuration of the Villa Volpe Google Analytics property. You may ask us for the retention period applicable to your record.
Your rights
Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Contact us at the email above. You may also lodge a complaint with the Italian data-protection authority, the Garante per la protezione dei dati personali.
How to delete your data
To ask us to delete the data we hold about you, including data received through Instagram, email villavolpeorta@gmail.com with the subject “Delete my data”, telling us your name or Instagram username. We will confirm the deletion within 30 days, except for records we must keep by law (for example accounting and guest-registration records). You can also delete your own comments and messages on Instagram at any time.
Security and automated decisions
We use access controls, input validation and service-level protections appropriate to the information handled. No decision producing legal or similarly significant effects is made solely by automated means through this website. A booking request is not a confirmed reservation until Villa Volpe replies.
Changes
We may update this notice when the website or its providers change. The date at the top identifies the current version.