Updated: 2 October 2026 · 2026-10-02.1
Controller and contact
The controller is Paeonia Resources s.r.l., VAT/tax number IT08343120963, Via Antonio Gambacorti Passerini 2, 20900 Monza (MB), Italy. For privacy questions or to exercise your rights: privacy@paeoniasrl.com. For enquiries about stays: info@villaeuropagardalake.com.
Information we process
We process information you choose to send: name, email address, optional telephone number, message, stay dates and number of adults and children. The number of children helps us assess capacity; the form does not request their names. Do not include identity documents, health information or payment card details in your message. The hosting provider may process connection information and security logs.
Purposes and legal bases
We use stay enquiries to respond, check availability and prepare a possible confirmation: steps taken at your request before entering a contract and, if your stay is confirmed, performance of the contract (GDPR Article 6(1)(b)). We handle other enquiries and protect the website on the basis of our legitimate interest in providing assistance and maintaining security (Article 6(1)(f)). Administrative and legal obligations rely on Article 6(1)(c). The ‘I have read the notice’ checkbox records acknowledgement; it is not marketing consent.
How the forms work
The contact form prepares a message in your email app: it is sent only when you send it from that app. Stay requests always require confirmation by the property and do not collect payments. The booking method available on these pages is described in the form and the note below. We do not store form drafts in your browser. These pages do not collect newsletter subscriptions.
Retention
Enquiries that do not become bookings are kept for six months after the last contact and then deleted. The property applies the same rule to copies in email and working files. Documents for confirmed bookings follow applicable administrative and tax retention requirements; information needed to establish or defend a right may be retained for the period needed for that purpose. The technical preference for this notice lasts six months in your browser. The OVH application’s spam prevention counters use identifiers derived with a secret key, without storing a plain IP address, and are deleted within 24 hours after the counter expires. Hosting provider log retention depends on its service.
Recipients, external services and transfers
Authorised property staff and providers needed for hosting, email and technical support may access information under their respective roles and agreements. Information is not published or sold. On these pages photos, fonts and videos are local, and maps and social media are not embedded. When you follow a link to Google, social media or the original booking website, those services apply their own privacy notices; they may process data outside the European Economic Area. Transfers by providers used by the property are subject to GDPR Chapter V safeguards, such as adequacy decisions or standard contractual clauses where required.
Your rights
You can request access, rectification, erasure or restriction and, where applicable, portability and object to processing based on legitimate interests. Email privacy@paeoniasrl.com with your request and, if available, your stay reference. The controller may ask only for information needed to verify your identity and responds within GDPR deadlines, normally one month. You may complain to the Italian Data Protection Authority (garanteprivacy.it) or the competent authority in your country.
Required information and automated decisions
Name, email, dates and guest numbers are necessary for a stay enquiry; without them we cannot handle it. A telephone number and additional message are optional in the direct request form. We do not profile visitors or make automated decisions with legal effects on them. Acceptance of a stay is a decision made by the property.
Request a stay
Direct requests on the OVH website send form information over HTTPS to the villa’s application. The reference, language, request contents, status and version of the notice acknowledged are recorded. Management access is restricted to the property. Direct requests become available only after the database and email service are configured.