Booking and guest portal privacy notice
Information notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 for anyone who books a stay on the Centro Vacanze De Angelis booking site and uses the «My booking» page · Version 2026-2 of 2 November 2026
This notice explains how Resort 95 Village S.r.l. processes the personal data of people who book on the booking site (book.villaggiocentrovacanzedeangelis.com), of the guests named in the booking and of anyone who uses the personal «My booking» page (guest portal), reached through the link in the confirmation.
The booking site is run directly by Resort 95 Village S.r.l. For browsing and cookies, the website Privacy Policy and the Cookie Policy apply; for requests sent to the Reception AI, WhatsApp, by phone or by email, the contacts, assistance and WhatsApp notice (in Italian) applies. Guest registration on arrival and the notification to the police (Alloggiati Web) follow the information given at reception.
1. Data controller and contacts
Resort 95 Village S.r.l.
Registered office: Via Giovanni XXIII, 33 - 63074 San Benedetto del Tronto (AP), Italy
Tax code and Companies Register number: 02344200445
REA: AP - 205865
Email for privacy requests: segreteria@deangelisvillage.com
Certified email (PEC): info@pec.resort95village.com
The controller has not appointed a Data Protection Officer (DPO), as the conditions of Article 37 GDPR do not apply.
2. Data processed
| When | Data |
|---|---|
| Booking | First name, last name, email, phone, country of residence, language; dates, accommodation, number of adults and children’s ages; rate, chosen extras, optional special requests; amounts, deposit, balance, booking status. For agency bookings, the agency’s details and the guest details the agency sends us. |
| Payments | Chosen method, amounts, date, status and reference of the transaction. Card details are entered on Stripe’s page and never reach us; for bank transfers, the copy of the transfer order you choose to upload. |
| My booking (optional) | Expected arrival time, car registration or «no car», phone number for the day of arrival, names of the other guests, requests for your arrival (e.g. cot). Please do not include health information unless it is needed for your stay. No identity documents are uploaded in the portal. |
| Review (optional) | Overall rating and ratings for each aspect (accommodation, cleanliness, staff, food and dining, beach and pools, entertainment, value for money), how likely you are to recommend us from 0 to 10, who you travelled with and any comments you choose to write. The review is linked to the booking (code, accommodation, dates, first name and initial of the surname). |
| Emails | For each email sent by the booking site: date and time, type (e.g. confirmation, reminder), booking code, recipient address in masked form for guests (e.g. m•••@domain.com), delivery result. The text of the emails is not copied into the log. |
| Technical data | IP address and browser data in the server logs, for security and abuse prevention. Cookies and measurement or marketing tools only according to the choices made in the banner (see Cookie Policy). |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing the booking: confirmation, payments, changes and cancellations according to the rate, voucher and QR code, assistance before and during the stay | Performance of the contract and of pre-contractual measures (Art. 6(1)(b) GDPR) |
| Preparing your arrival with the details entered in «My booking» and organising reception (list of the day’s arrivals) | Performance of the contract (Art. 6(1)(b)); the details are optional |
| Service emails before arrival (about 21 and 2 days before; 7 days before only if arrival time and car registration are missing) with times, directions, balance and link to the booking page | Performance of the contract (Art. 6(1)(b)). They are not promotional emails |
| Collecting the balance online, if you choose to pay it by card from the booking page | Performance of the contract (Art. 6(1)(b)) |
| Tax and accounting obligations, handling of disputes and refunds | Legal obligation (Art. 6(1)(c)) and legitimate interest in protecting our rights (Art. 6(1)(f)) |
| Log of sent emails, to know whether a message was sent and to resolve complaints | Legitimate interest in proving that service messages were sent (Art. 6(1)(f)) |
| Asking you after your stay, with an email the day after departure and at most one reminder (direct bookings only), for optional feedback; reading and analysing the answers to improve our services and contacting you if you report a problem. Reviews are read only by the management and are not published | Legitimate interest in improving our services and handling complaints (Art. 6(1)(f)). You can decline the invitations with the link at the bottom of the email |
| Measurement and marketing (e.g. Meta conversions) | Consent given in the cookie banner (Art. 6(1)(a)), which can be withdrawn at any time |
We do not use booking or portal data for automated decisions that produce legal or similarly significant effects on you.
4. Whether providing data is mandatory
The data marked as mandatory in the booking form are needed to conclude and manage the contract: without them we cannot confirm the booking. The details in «My booking» are optional: if you do not enter them, we will ask for them at reception.
5. Who processes the data
The data are processed by authorised reception, administration and management staff, and by Marktime, which develops and maintains the booking site, as data processor. The following receive data, only as far as needed:
- Stripe (Stripe Payments Europe Ltd.), for payments by card, Apple Pay and Google Pay. Stripe processes the data on our behalf, as data processor, to carry out the payment; as an independent controller it processes them to prevent fraud, meet legal obligations (e.g. anti-money laundering) and improve its services, under its own privacy notice;
- the hosting provider of the booking site server, as data processor;
- Register.it, for sending emails from the resort’s domain;
- Google (Google Workspace), for the bookings and arrivals sheet used by reception and, if you choose it, for the Google Wallet pass;
- Scidoo, the reception management system in which reception records the stay;
- the agency you booked with, for agency bookings;
- Meta, for measuring bookings, only if you consented to marketing in the banner;
- public authorities, where required by law (e.g. police for guest registration, the Italian Revenue Agency).
The «Book» buttons for services open the website’s Reception AI or the Beach Club booking site: their own notices apply there.
6. Transfers outside the European Economic Area
Stripe, Google and Meta may process data in the United States. Transfers take place with the safeguards of Articles 44 et seq. GDPR: the EU-US Data Privacy Framework adequacy decision for certified providers or the European Commission’s standard contractual clauses. You can ask for a copy from the privacy contact in section 1.
7. Retention
| Data | Retention |
|---|---|
| Booking, payments and accounting and tax records | Up to 10 years, for legal obligations (Art. 2220 of the Italian Civil Code) and limitation periods |
| «My booking» details (arrival time, car registration, phone for arrival, guest names, requests) | Automatically deleted 30 days after departure |
| Bookings not completed (payment failed or expired) | 12 months from the request, then automatically deleted |
| Copy of the bank transfer uploaded by the guest | With the booking, for accounting obligations |
| Log of sent emails | 24 months, then automatically deleted |
| Reviews | 24 months, then deleted automatically |
| Server logs | For the time needed for service security, according to the server’s automatic log rotation |
| Backups | On a rotating basis, within 30 days of creation |
8. Your rights
You can ask for access to your data, rectification, erasure within the limits of legal obligations, restriction, portability of the data you provided, and object to processing based on legitimate interest. You can withdraw your cookie consent at any time from the «Cookie preferences» link on the website, without affecting processing already carried out. You can change or delete your arrival details yourself from the booking page, or ask us to do so.
Write to segreteria@deangelisvillage.com stating your booking code. We reply without undue delay and normally within one month. You can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the EU country where you live or work.
9. Minors
Bookings may only be made by adults. For minors travelling with you we process only their age, needed for the price, and their names only if you choose to enter them in «My booking».
10. Updates
This notice may be updated for new features of the booking site or the portal, for example booking services with payment or pre-filling guest registration details. We will update it before activating them and indicate this on this page.
This is a translation: in case of discrepancy, the Italian version prevails.