Data transparency
Privacy notice
This notice explains how Borgo Vivo Abruzzo processes personal data sent through the contact form, email, WhatsApp or other channels chosen by the user to request information, visits, dossiers or operational support related to Abruzzo villages.
Last updated: 10 May 2026
1. Data controller
The Data Controller is Mattia Guerra – Borgo Vivo Abruzzo, contactable through:
Privacy requests can be sent to the email address above, using “Privacy request” as the subject line.
2. Data processed
The site collects only the data the user decides to send. In particular:
| Category | Examples | Source |
|---|
| Identification and contact data | Name, email, phone number | Form, email or WhatsApp |
| Request data | Selected profile, village or area of interest, goal, message content | Form, email or WhatsApp |
| Technical navigation data | IP address, user agent, technical logs, security and availability events | Hosting and technical infrastructure |
| Administrative data, if the relationship continues | Data needed for quotes, assignments, invoicing, payments and accounting duties | Later communications and contractual documents |
The first request should contain only information useful to understand the initial need. Users should avoid sending health data, identity documents, banking data or other sensitive information unless specifically requested at a later stage through a suitable channel.
3. Purposes and legal bases
| Purpose | Legal basis | Practical example |
|---|
| Replying to the user’s request | Pre-contractual measures requested by the data subject | Answering a question about a village, a visit or a service |
| Organising a first conversation, visit or operational dossier | Pre-contractual measures or performance of the requested relationship | Preparing a call, site visit, shortlist or report |
| Managing continuity of communication | Controller’s legitimate interest in following up on conversations started by the user | Retrieving previously shared information to avoid asking again |
| Managing security, maintenance and operation of the website | Legitimate interest in IT security and service continuity | Technical logs, spam prevention, malfunction checks |
| Complying with tax, accounting or legal duties | Legal obligation | Keeping invoices, assignments, payments or relevant communications |
The site does not use data for newsletters, behavioural advertising, commercial profiling or automated decision-making. Any future promotional activity will require a separate legal basis and an updated notice.
4. Tools, providers and channels used
To manage the website and requests, the following tools may be used:
- Netlify, for website hosting and technical management of Netlify Forms.
- Domain email service, to reply to user requests.
- WhatsApp, only when the user chooses to write or receive replies through this channel.
- Local professionals or suppliers, when useful for the requested service: for example technicians, local contacts, maintenance providers or consultants. Sharing is limited to the concrete case.
- Administrative, tax or legal consultants, if needed for legal obligations or protection of the relationship.
Some providers may process data outside the European Economic Area. In these cases, transfers are managed through GDPR mechanisms such as adequacy decisions, standard contractual clauses or other applicable safeguards.
When WhatsApp is used, the channel is also managed by WhatsApp/Meta according to its own privacy rules. For confidential information or documents, email is preferable and the most appropriate channel should be agreed in advance.
5. Retention periods
| Data | Indicative period | Criterion |
|---|
| Information requests not followed by an assignment | Up to 12 months after the last contact | Request management and possible follow-up |
| Communications related to services, visits or dossiers | For the duration of the relationship and up to 24 months after operational closure | Continuity, service quality and documentation |
| Tax and accounting documents | According to applicable legal terms | Civil, tax and accounting obligations |
| Technical website logs | According to the technical provider’s settings and policies | Security, diagnostics and abuse prevention |
When data is no longer necessary, it is deleted, anonymised or kept only where required by law or needed to protect a right.
6. Optional nature of data provision
Providing data is optional. Name, email and minimum request content are needed to receive a reply. Failure to provide such data may prevent the request from being managed.
7. Data sharing
Data is not sold. It may be shared only with parties involved in the technical management of the site, in replying to the request, in any requested service or in administrative and legal duties. Each communication is limited to relevant information.
8. Security
The Controller adopts organisational and technical measures proportionate to the nature of the data processed: limited access to communications, minimisation of requested information, use of professional technical providers and periodic review of tools included in the website.
9. Data subject rights
The user may request, within GDPR limits:
- access to personal data;
- rectification of inaccurate data;
- erasure of data;
- restriction of processing;
- objection to processing based on legitimate interest;
- data portability, where applicable;
- withdrawal of consent, where processing is based on consent.
Requests should be sent to info@borgovivoabruzzo.com. Users may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.
10. Cookies and tracking tools
The current version of the site is configured without profiling cookies, advertising pixels, analytics, embedded maps, embedded videos, social plugins or external web fonts. Details are available in the Cookie policy.
11. Updates
This notice may be updated in case of new features, new providers, legal changes or service changes. The version published on this page applies at the time of consultation.