Privacy Policy
Last updated: 19 October 2026
This policy explains how JTVILLAS di Maria Udris collects and processes the personal data of people who visit www.jtvillas.com, contact us (including via WhatsApp) or stay at the properties we manage.
1. Data controller
JTVILLAS di Maria Udris – sole proprietorship
Via A. Vespucci 1 – 53043 Chiusi (SI), Italy
VAT IT01636600528 · Tax code DRSMRA86H68Z129P · REA SI-226135
E-mail: info@jtvillas.com · Certified e-mail (PEC): mariaudris@pec.it · Phone/WhatsApp: +39 327 389 8066
2. Data we process
- Contact data: first and last name, phone number, e-mail address.
- WhatsApp data: phone number, WhatsApp profile name, the content of the messages you send us (text, images, documents, location), message date and time, and delivery/read status.
- Booking data: dates of stay, number and type of guests, special requests, payment and invoicing details.
- Guest data required by law: personal and ID document details that we must report to the Italian police (art. 109 T.U.L.P.S.), for official statistics and for the municipal tourist tax.
- Technical browsing data: IP address and browser information, processed by the web server for security and operation.
We do not intentionally collect special categories of data (art. 9 GDPR). Please do not send us such data via WhatsApp or e-mail.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your questions and availability requests (via WhatsApp, phone or e-mail) | Pre-contractual steps at your request (art. 6(1)(b) GDPR) |
| Managing your booking and stay; sending confirmations, check-in instructions, reminders and support via WhatsApp | Performance of a contract (art. 6(1)(b) GDPR) |
| Legal obligations: guest registration with the police, statistics, tourist tax, tax and accounting duties | Legal obligation (art. 6(1)(c) GDPR) |
| Sending offers and promotional messages via WhatsApp or e-mail | Only with your explicit consent (art. 6(1)(a) GDPR), which you can withdraw at any time |
| Website security and protection of our rights | Legitimate interest (art. 6(1)(f) GDPR) |
4. Use of WhatsApp Business
We communicate with customers through the WhatsApp Business Platform (WhatsApp Cloud API) provided by Meta. In particular:
- We message you on WhatsApp only if you contacted us first or gave us your number and agreed to receive messages from JT Villas (opt-in), for example when making an enquiry or a booking.
- Service messages (confirmations, stay information, check-in) relate to your booking. Promotional messages are sent only with your specific consent.
- You can stop receiving messages at any time by replying STOP, blocking our number, or writing to info@jtvillas.com.
- Messages are transmitted and processed on the infrastructure of Meta Platforms Ireland Ltd., which acts as our data processor to provide the service. Your use of WhatsApp is also subject to the WhatsApp Terms of Service and Privacy Policy.
- We do not sell or share WhatsApp conversation data, and we do not use it for any purpose other than those described in this policy.
5. Recipients
Where necessary, your data may be shared with:
- Meta Platforms Ireland Ltd. (WhatsApp Business Platform) for messaging;
- hosting, e-mail and IT service providers;
- booking platforms (e.g. Airbnb, Booking.com) when you book through them;
- banks and payment providers, tax advisors and accountants;
- public authorities (police, municipality, Italian Revenue Agency, ISTAT) to meet legal obligations.
Providers processing data on our behalf are appointed as data processors under art. 28 GDPR. Your data is never made public.
6. Transfers outside the European Union
Some providers, including Meta and its affiliates, may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission (arts. 45–46 GDPR).
7. Retention
- Enquiries and WhatsApp conversations without a booking: up to 24 months from the last contact.
- Booking and invoicing data: 10 years, as required by Italian tax law (art. 2220 Civil Code).
- Guest registration data: only as long as strictly necessary to meet legal obligations.
- Marketing data: until you withdraw consent, and in any case no longer than 24 months from the last contact.
8. Your rights
Under arts. 15–22 GDPR you can at any time request access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing. You can also withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, write to info@jtvillas.com or to our certified e-mail mariaudris@pec.it. We reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
9. How to request deletion of your data
To request deletion of the data you have given us, including your messages and WhatsApp number:
- send a WhatsApp message to +39 327 389 8066 with the text "DELETE MY DATA", or
- write to info@jtvillas.com stating the phone number and/or e-mail address you used to contact us.
We will delete your data within 30 days and confirm once done, except for data we are legally required to keep (e.g. tax records). You can also delete the chat from your own device at any time.
10. Cookies
This website does not use profiling cookies or advertising trackers. To display its fonts, the site loads them from Google Fonts, which means your IP address is sent to Google (Google's privacy policy).
11. Children
Our services are not directed at children under 14. Bookings must be made by adults.
12. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS) and access limited to authorised people.
13. Changes
We may update this policy. The current version is always published on this page, together with the date of the last update.