Privacy Policy Villa Celi
Last Updated: 22-Jan-2026
Effective Date: 22-Jan-2026
This Privacy Policy describes the policies of Villa Celi, Via Saline, 13bis, Salerno 84051, Italy, email: info@villaceli.it, phone: 3661244305 on the collection, use and disclosure of your information that we collect when you use our website (https://www.villaceli.it). (the “Service”).
By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.
We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.
Information We Collect
We will collect and process the following personal information about you:
For Booking Inquiries:
- Name
- Mobile
π For Chatbot Analytics (Optional – Requires Consent):
- Country of origin (detected via Cloudflare)
- Message length (number of characters)
- Anonymous session ID (randomly generated)
We DO NOT collect via chatbot:
- IP addresses
- Message content
- Personal identifiable information
How We Use Your Information
We will use the information that we collect about you for the following purposes:
Booking Data (Name, Email, Mobile):
- Processing accommodation requests
- Customer service communication
- Booking confirmations
π Chatbot Analytics Data (Country, Message Length, Session ID):
- Improving chatbot performance
- Understanding user needs
- Service optimization
- Statistical analysis
Marketing:
- Targeted advertising (only with explicit consent)
- Site protection
Legal Basis:
- Booking data: Contractual necessity (GDPR Art. 6.1.b)
- π Chatbot analytics: Explicit consent (GDPR Art. 6.1.a)
- Marketing: Legitimate interest (GDPR Art. 6.1.f)
If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.
π Chatbot “Paguro” – Specific Information
Our virtual assistant “Paguro” collects anonymous analytics data about conversations ONLY if you consent to “Analytics” cookies via our cookie banner.
Data Collected WITH Consent:
- β Country of origin (detected from Cloudflare headers)
- β Message length (character count only, NOT content)
- β Anonymous session ID (randomly generated, e.g., “sess_abc123”)
Data NOT Collected:
- β IP addresses (not logged or stored)
- β Message content (conversations are NOT saved)
- β Personal identifiable information (no names, emails, phone numbers)
Purpose: Service improvement and performance analytics only.
Legal Basis: Consent (GDPR Art. 6.1.a) – You can revoke consent anytime via cookie settings.
Retention Period: Analytics data is automatically deleted after 30 days via automated retention policy.
Third-Party Processor: InfluxDB (time-series database) – hosted at 192.168.1.140 (internal server, no external sharing).
Your Rights: You can:
- Withdraw consent anytime via cookie banner
- Request deletion of your session data
- Access data associated with your session ID
How We Share Your Information
We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:
For All Users:
- Ad service (with consent)
- Analytics (with consent)
π For Chatbot Analytics (Only with Consent):
- InfluxDB database (internal server, no external third parties)
- Data is NOT shared with external entities
- Data is NOT sold or transferred
We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose.
We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.
Retention Of Your Information
Booking Data (Name, Email, Mobile):
- Retained for 90 days to 2 years after users terminate their accounts or for as long as we need it to fulfill the purposes for which it was collected.
π Chatbot Analytics Data:
- Automatically deleted after 30 days via InfluxDB retention policy
- No manual deletion required
General: We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.
Your Rights
Depending on the law that applies, you may have a right to:
- Access and rectify or erase your personal data
- Receive a copy of your personal data
- Restrict or object to the active processing of your data
- Ask us to share (port) your personal information to another entity
- π Withdraw consent for chatbot analytics (via cookie settings or email)
- π Request deletion of chatbot session data (email us with session ID)
- Lodge a complaint with a statutory authority (Italian Data Protection Authority – Garante)
To exercise these rights, you can write to us at info@villaceli.it. We will respond to your request in accordance with applicable law (within 30 days per GDPR Art. 12).
Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.
Cookies
To learn more about how we use cookies and your choices in relation to these tracking technologies, please refer to our Cookie Policy managed via CookieYes.
π Chatbot Cookies:
paguro_session_id(Analytics category) – requires consentpaguro_auth_*(Strictly Necessary category) – authentication for booking area
You can manage your cookie preferences via the cookie banner or by clicking the cookie settings icon at any time.
Security
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control.
π Chatbot Security Measures:
- HTTPS encryption for all communications
- Session IDs are randomly generated and non-sequential
- No storage of message content
- Automatic 30-day data deletion
However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.
Third Party Links & Use Of Your Information
Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Grievance / Data Protection Officer
If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at:
Villa Celi
Via Saline, 13bis
Salerno 84051, Italy
Email: info@villaceli.it
Phone: 3661244305
We will address your concerns in accordance with applicable law.
Children’s Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.
Privacy Policy generated with CookieYes and updated for GDPR compliance.