Privacy Policy
Last updated: March 2026
Data Controller
The data controller is Villa Gabri 25, located in Seriate, Bergamo, Italy. For any privacy-related questions, contact us at info@villagabri25.it.
Data Collected
We collect the following personal data: name, email address, and message content through the contact form. We also collect technical data (IP address, browser type, operating system) through server logs to ensure site security. With your consent, we collect analytics data through PostHog and Umami, including: pages visited, interactions with site features (e.g., contact form submissions, booking link clicks, listing views, gallery usage), device type, browser, and approximate location derived from IP address. Analytics data is collected in aggregate and is not used to identify individual users.
Purpose of Processing
Your data is processed to: respond to your inquiries through the contact form, improve our website and services through anonymous usage analytics, comply with legal obligations.
Legal Basis
Data processing is based on: your explicit consent (Art. 6.1.a GDPR), performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), legitimate interest of the controller (Art. 6.1.f GDPR).
Cookies and Analytics
This site uses essential technical cookies required for operation. With your consent, we also use: functional cookies (e.g., Google Maps for interactive maps); analytics cookies via PostHog (product analytics, session insights) and Umami (privacy-focused traffic statistics). PostHog data is sent to servers in the United States through a first-party proxy (/ingest). Umami Cloud processes data on servers in the European Union. Neither tool collects personal identifiers; analytics are used solely to understand site usage and improve the visitor experience. You can manage your preferences through the cookie banner or the settings in the site footer.
Data Retention
Contact form data is retained for the time necessary to respond to the request and in any case no longer than 12 months. Cookie preferences are retained for 6 months. Analytics data is retained according to each provider's default retention policy and in any case no longer than 12 months.
Your Rights
Under GDPR you have the right to: access your personal data, rectify inaccurate data, erase your data (right to be forgotten), restrict processing, data portability, object to processing. To exercise your rights, contact us at info@villagabri25.it.
Data Transfers
Data may be transferred to the following service providers that operate in compliance with GDPR: Resend (United States) for email delivery, PostHog Inc. (United States) for product analytics, Umami Software Inc. (European Union) for traffic statistics. Transfers to the United States are covered by adequate safeguards under EU-U.S. Data Privacy Framework. We do not sell or share your data with third parties for marketing purposes.
Changes to This Policy
We reserve the right to update this policy. Changes will be published on this page with the last updated date.