De Angelis Privilege Privacy Notice
Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 for participants in the De Angelis Privilege loyalty programme · Version 2026-1 of 20 October 2026
This is a courtesy translation. In case of discrepancies, the Italian version prevails.
This notice describes how Resort 95 Village S.r.l. processes the personal data of those who join the De Angelis Privilege programme (the “Programme”). For other processing, such as browsing the website, bookings and guest registration, the website Privacy Policy and the specific notices provided at the time of collection apply.
1. Data controller
Resort 95 Village S.r.l.
Registered office: Via Giovanni XXIII, 33 – 63074 San Benedetto del Tronto (AP), Italy
Tax code and Companies Register number: 02344200445
Email for privacy requests: segreteria@deangelisvillage.com
Certified email: info@pec.resort95village.com
2. What data we process
- Registration data: first name, last name, email address, telephone (optional), language, country, website or property where you joined.
- Programme data: card number, tier and its expiry, points balance and transactions, rewards requested, benefits assigned (for example bar and restaurant credit, upgrades).
- Stay and spending data: dates, property, accommodation, number of nights and amounts of stays; amount, date and outlet of purchases recorded with the card (restaurants, bars, Beach Club, activities). We do not process the details of what was consumed.
- Member area access data: one-time codes sent by email, date and time of access.
- Proof of consent: text accepted, document version, date and time, page of origin.
We do not process payment data or special categories of data (for example health data) for the Programme.
3. Where the data come from
Registration data are provided by you. Stay and spending data come from the Properties’ systems: booking management system, official booking site, tills of the outlets and of the Beach Club. They are matched to your membership through your email address or card. To assign your initial tier, we use 2026 stays registered with the same email address.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing membership and participation in the Programme: card, earning and using points, tier calculation, benefits, rewards, member area, service communications (welcome, expiry reminders, changes to the Terms) | Performance of the participation contract (Art. 6(1)(b) GDPR) |
| Applying the members’ rate and tier benefits to bookings and during the stay | Performance of the contract (Art. 6(1)(b)) |
| Complying with tax and accounting obligations relating to discounts and rewards | Legal obligation (Art. 6(1)(c)) |
| Preventing abuse and fraud, defending the Controller’s rights | Legitimate interest (Art. 6(1)(f)) |
| Sending member-only offers and news by email, including offers selected on the basis of tier and previous stays | Optional consent (Art. 6(1)(a)), which can be withdrawn at any time |
The tier is calculated automatically on the basis of objective, public thresholds (nights, stays, spending) set out in the Terms and Conditions. The calculation has no legal effects other than those of the Programme you have accepted. On request, a member of staff can check the calculation.
5. Providing data
First name and email are required to join; without them you cannot take part in the Programme. Telephone and marketing consent are optional: refusing them does not prevent you from taking part or earning points.
6. Who can access the data
Data are processed by the Controller’s authorised staff (reception, outlets, administration), each only as far as needed for their duties. The following may access them as processors bound by an agreement under Art. 28 GDPR:
- providers of hosting and maintenance of the website and the management system;
- the provider of the booking management system;
- email service providers;
- administrative and tax consultants.
If you choose to add the card to Apple Wallet or Google Wallet, the card details (name, tier, number and QR code) are sent to the chosen service, which processes them under its own terms. Data are not sold or disclosed to third parties for their own purposes.
7. Transfers outside the European Union
The Controller does not transfer Programme data outside the European Economic Area. If a provider were to do so, the transfer would take place only with the safeguards of Articles 44 et seq. GDPR, for example an adequacy decision or standard contractual clauses.
8. How long we keep the data
| Data | Retention |
|---|---|
| Membership and Programme data | For the duration of the membership. On cancellation, or after 36 months without stays, purchases or access to the member area, the data are deleted or anonymised. |
| Points transactions linked to tax documents | 10 years, as required by tax law, anonymised after the membership ends where possible |
| Marketing consent and mailings | Until consent is withdrawn, or up to 24 months after the last activity in the Programme |
| Proof of consent | For as long as needed to demonstrate it was collected, and in any case no longer than 10 years |
| Member area access codes | 10 minutes; access logs: 12 months |
9. Your rights
You may at any time request:
- access to your data, rectification, erasure, restriction of processing and portability;
- to object to processing based on legitimate interest;
- to withdraw marketing consent, from the member area, from the link in every email or by writing to the Controller, without affecting the lawfulness of prior processing.
Requests should be sent to segreteria@deangelisvillage.com. The Controller replies within one month, which may be extended in the cases provided for by Art. 12 GDPR.
You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country of residence.
10. Minors
The Programme is reserved for adults. We do not knowingly accept memberships from minors; if we become aware of one, the membership is cancelled.
11. Updates
This notice may be updated, for example for new Programme services. The current version is always published on this page. Significant changes are communicated to Members by email.