Last updated: 11/09/2026 · v1.0
The data controller is Elahouse S.r.l.s., operator of the guest house Villa Galli, Via IV Novembre 8–14, 22030 Caslino d'Erba (CO), Italia.
For any request concerning your personal data please write to info@villagalli.com. No Data Protection Officer has been appointed, as it is not required by law in our case.
We only process data you give us yourself or that is strictly needed to run this website.
We collect your name, phone number, email address (optional) and the text of your message, together with the date and time of submission, the website language and your IP address in anonymised form (the last block is set to zero). The only purpose is to answer your enquiry and discuss a possible stay.
Legal basis: Art. 6(1)(b) GDPR — pre-contractual steps taken at your request. Name, phone and message are required to receive an answer; the email address is optional and only used if you prefer a written reply.
Bookings are not made on this website: they are handled by the external engine Amenitiz or by Booking.com and Airbnb, each with its own privacy notice. If you book, the data required for your stay (including the guest details we must report to the Italian police authority by law) is processed to perform the contract and to comply with legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
The website uses technical cookies necessary for it to work and, only with your consent, measurement and marketing tools. No profiling tool is activated before you press "Accept all" in the banner. Full details in our cookie policy.
We publish reviews already made public by guests on Booking.com, Airbnb and Google, showing only the first name as displayed on those platforms. If you wrote a review and do not wish to appear here, contact us and we will remove it.
We never sell or rent your data. It may be processed, as processors or independent controllers, by the providers that allow us to deliver the service:
Some providers may transfer data outside the European Economic Area (in particular to the United States). Such transfers rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on Standard Contractual Clauses, with supplementary safeguards.
At any time you may exercise the rights under Articles 15-22 GDPR: access, rectification, erasure ("right to be forgotten"), restriction, data portability, objection, and withdrawal of consent at any time without affecting the lawfulness of processing already carried out.
To exercise them write to info@villagalli.com: we will reply within 30 days. You can withdraw cookie consent at any time from the cookie policy and unsubscribe from communications on the removal request page.
If you believe the processing infringes data protection law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of your country of residence, or seek a judicial remedy.
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure: encrypted HTTPS connection, management panel protected by personal credentials, regular backups and access limited to authorised staff only.
We carry out no fully automated decision-making or profiling producing legal effects concerning you.
This website is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this notice to reflect changes in the law or in the services we use. The current version is always published on this page, with the last update date shown at the top.