Privacy Policy
Last updated: September 2026
Data Controller
The data controller is Ersilia Guerini, who operates Villa Gabri 25 in Seriate, Bergamo, Italy. For any privacy-related questions, contact us at info@villagabri25.it.
Data Collected
We collect the following personal data: name, email address, and message content through the contact form. We also collect technical data (IP address, browser type, operating system) through server logs to ensure site security. With your consent, we collect analytics data through PostHog and Umami, including: pages visited, interactions with site features (e.g., contact form submissions, booking link clicks, listing views, gallery usage), device type, browser, and approximate location derived from IP address. PostHog may also record browsing sessions (mouse movement, clicks, scrolling and pages viewed) to help us see where the site is unclear; text typed into forms is never recorded. Analytics data is linked to a random identifier, not to your name or email address, and is not used to identify you.
Purpose of Processing
Your data is processed to: respond to your inquiries through the contact form, improve our website and services through site usage analytics, with your consent, comply with legal obligations.
Legal Basis
Data processing is based on: your explicit consent (Art. 6.1.a GDPR), performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), legitimate interest of the controller (Art. 6.1.f GDPR).
Cookies and Analytics
This site uses essential technical cookies required for operation. With your consent, we also use: functional cookies (e.g., Google Maps for interactive maps); analytics cookies via PostHog (product analytics and session recording) and Umami (privacy-focused traffic statistics). PostHog data is sent to servers in the European Union through a first-party proxy (/a). Umami Cloud processes data on servers in the European Union. Neither tool collects your name or contact details; analytics are used solely to understand site usage and improve the visitor experience. You can manage your preferences through the cookie banner or the settings in the site footer.
Data Retention
Contact form data is retained for the time necessary to respond to the request and in any case no longer than 12 months. Cookie preferences are retained for 6 months. Analytics data is retained according to each provider's default retention policy and in any case no longer than 12 months. Session recordings are retained for 30 days.
Your Rights
Under GDPR you have the right to: access your personal data, rectify inaccurate data, erase your data (right to be forgotten), restrict processing, data portability, object to processing. To exercise your rights, contact us at info@villagabri25.it.
Data Transfers
Data may be transferred to the following service providers that operate in compliance with GDPR: Lettermint B.V. (Netherlands) for email delivery, PostHog Inc. (European Union, EU instance) for product analytics, Umami Software Inc. (European Union) for traffic statistics, Vercel Inc. (United States) for website hosting, Cloudflare Inc. (United States) for image delivery and, only with consent to functional cookies, Google (United States) for maps. Transfers to the United States are covered by adequate safeguards under EU-U.S. Data Privacy Framework. We do not sell or share your data with third parties for marketing purposes.
Changes to This Policy
We reserve the right to update this policy. Changes will be published on this page with the last updated date.