Privacy Policy

Your privacy is important to us

With this statement, made in light of privacy legislation, and in particular the European Regulation 2016/679 (hereinafter “GDPR”), we want to provide you with some information to illustrate the characteristics and methods of processing personal data you provide, as a data subject (hereinafter also “Data Subject” or “User”), through the consultation of the website www.legreghe.it

This information refers only to this site and not to websites of third parties, which may be accessible by the User through links contained therein.

Firstly, the data controller (hereinafter also “Controller”), which the GDPR defines as “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data” is Luxury Home Resort Le Greghe S.r.l., in the person of its legal representative pro tempore, with registered office at 37017 LAZISE (Verona) - ITALY, Strada delle Greghe, 9, VAT No./Tax Code 03857590230, telephone +39 045 485 3058.

We will try to be comprehensive, but we want to clarify that at any time you can contact the data controller to request information regarding the processing of your data, by sending an email to info@legreghe.it.

In accordance with the provisions of the GDPR, you have the right to exercise the rights listed below. For a better understanding of these rights, we invite you to consult in full Articles 15 et seq. of the GDPR.

- Right of access (Art. 15 GDPR): you can ask for confirmation whether or not data concerning you is being processed and, if so, to access the personal data and further information related to the processing.

- Right to rectification (Art. 16 GDPR): you can ask to rectify or complete the data provided or otherwise held by the Controller, if inaccurate or incomplete.

- Right to erasure (“right to be forgotten”) (Art. 17 GDPR): you can request that data acquired or processed by the Controller be deleted without undue delay, if (i) they are no longer necessary for the purposes for which they were collected, (ii) consent has been withdrawn and there is no other legal ground for processing, (iii) the Data Subject has objected to processing, (iv) the data have been unlawfully processed, or (v) there is a legal obligation to delete.

- Right to restriction of processing (Art. 18 GDPR): you can request the restriction of processing of personal data, when one of the following applies: (i) the Data Subject contests the accuracy of their data, for the period necessary for the Controller to verify the accuracy of such data; (ii) the processing is unlawful and the Data Subject opposes the deletion of the data, requesting instead that their use be limited; (iii) although the Controller no longer needs the data for processing purposes, the data are necessary for the Data Subject to establish, exercise or defend a legal claim; (iv) the Data Subject has objected to processing pursuant to Art. 21, para. 1, of the GDPR, pending the verification whether the legitimate grounds of the Controller override those of the Data Subject.

- Right to data portability (Art. 20 GDPR): you have the right (i) to receive your data in a structured, commonly used and machine-readable format, (ii) to have them transmitted directly from the Controller to another controller indicated by you, if technically feasible, as well as (iii) to transmit them to another controller without hindrance from the Controller.

- Right to object (Art. 21 GDPR): you have the right to object, at any time for reasons related to your particular situation, to the processing of personal data concerning you based on the condition of legality of legitimate interest or the performance of a task in the public interest or the exercise of public authority, including profiling, unless there are legitimate reasons for the Controller to continue processing that override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of legal claims. Moreover, you have the right to object at any time to processing if personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing.

- Right not to be subject to automated decision-making, including profiling (Art. 22 GDPR): you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Furthermore, you can exercise at any time your right to withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, you can send a request to the Controller via email, certified email, or postal mail, using the contact details of the Controller indicated within this information.

Finally, we inform you that as a Data Subject, you have the right to file a complaint with the Supervisory Authority, which in Italy is the Guarantor for the Protection of Personal Data.


Now we would like to explain to you what kind of data we process when you consult this site.
- Browsing data

During browsing, the website collects some personal data, the transmission of which is implicit in the use of Internet communication protocols. These are information that is not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, the time of the request, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.
These data are processed solely to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted after processing.

- Data collected using cookies or similar technologies. 

We invite you to read the extended cookie policy.

- Data provided by you.

As a User of the site, you may provide us with personal data such as identification and contact data (e.g., name, surname, address, telephone number, email, telephone number, payment data). These are information that you may provide us by sending a message through the “Contacts” form or other forms on the site, by writing to us and/or calling us, by booking a service, or by subscribing to the newsletter.

- Finally, we also collect data that we need to obtain to demonstrate that you have given your consent to process the data you provided.

Below, we will explain for which purposes we process your data, what is the legal basis of the processing and how long we will keep your dataWe will also inform you about the nature of the provision of this data.

- We process your data to carry out activities that are preparatory, preliminary and/or subsequent to the purchase of a service such as, for example, following up on information requests, allowing reservations, sending a quote, managing the service, as well as for the fulfillment of any possible obligation provided for and arising from the contract.

In this case, the legal basis consists of the need to execute a contract of which the data subject is a party or to take pre-contractual measures at the request of the same.

The data processed for this purpose will be stored for the time necessary to fulfill the purpose, in particular for the entire duration of the contractual relationship possibly concluded and, after termination, for the ordinary prescription period of 10 years; in the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of feasibility of the challenge actions, without prejudice in any case to compliance with current regulations.

- We process your data to fulfill any legal and/or regulatory obligations. In this case, the legal basis consists of the need to fulfill a legal obligation to which the data controller is subject and the retention period will correspond to the duration provided for depending on the law.

- We process your data to prevent abuse and fraud, for the ascertainment, exercise or defense of a right in judicial proceedings of the Owner, for the protection of the rights of the Owner out of court. In this case the legal basis consists of the need to pursue the legitimate interest of the data controller or third parties, provided that the interests or rights and fundamental freedoms of the data subject requiring the protection of personal data do not prevail, especially if the data subject is a minor. We will retain the data for the time necessary to fulfill the purpose.

- We process your data to respond to your questions, following an express request via email/phone/through the completion of the contact us form. In this case the legal basis consists of your consent and the data will be stored for the time necessary to fulfill this purpose.

- We process your data to send you our newsletter, which may contain promotions, offers, events. Also in this case, the legal basis consists of your consent and the data will be stored until the withdrawal of consent. More specifically, we inform you that you can unsubscribe from our newsletter using the specific link present in the newsletter itself or by writing to us at any time at info@legreghe.it

- Finally, we process your data to be able to demonstrate your consent to the processing, where required, for a maximum period of 24 months, without prejudice in any case to compliance with current regulations.

Once the retention terms have expired, the data will be destroyed, deleted or made anonymous. At the same time, in the event that other processing purposes should subsequently emerge, the Owner will take care to provide you with further information.

We inform you that the provision of data to carry out activities that are preparatory, preliminary and/or subsequent to the purchase of a service is necessary to allow the fulfillment of this purpose, so that any refusal to provide them in whole or in part could lead to the non-execution or partial execution of the contract or the impossibility for the Owner to properly perform all the obligations connected to the relationship. The provision of data to respond to your questions and/or to send the newsletter does not depend on a legal or contractual obligation and is entirely optional.

We want to inform you that your data will be processed mainly electronically (but we do not exclude paper processing), adopting security measures aimed at avoiding any violation of personal data, such as data loss, unlawful or incorrect uses and unauthorized access. However, these measures, due to the nature of the online transmission medium, cannot limit or absolutely exclude any risk of unauthorized access or dispersion of data. For this reason, we advise you to periodically check that your device is equipped with adequate software devices for the protection of data transmission over the network, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has adopted suitable measures for the security of data transmission over the network (such as firewalls and anti-spamming filters).

We will communicate your personal data to third parties (from time to time appointed, if necessary, Data Processors under art. 4 n.8 GDPR), only when it is essential and only to the extent strictly necessary to achieve the purposes of the processing. Therefore, the data may be communicated to subjects who are part of our company, duly authorized to process data; to suppliers/other companies/entities and/or individuals who perform instrumental, support or functional activities to the execution of contracts or services requested (e.g. carriers, couriers); to external personnel (such as third-party technical service providers, hosting providers, IT companies, companies that offer email and booking services); in the case of marketing purposes, to consultants, communication agencies, companies in charge of designing, printing and maintaining editorial materials advertising or promotional and/or their online management, direct emailing service companies; to third parties who provide administrative, payment and billing services, legal consultants; to subjects to whom the power to access data is granted by law provisions or regulations and other subjects provided by law. We specify that for the provision of the newsletter service we use MailUp, a communication platform for sending newsletters, of the company MailUp S.p.A.; for booking services we use Vertical Booking S.r.l.

In any case, you can always request from the Data Controller the updated list of Data Processors.

Except personal data is stored on servers located within the European Union and will not be transferred outside the European Union. Otherwise, after duly informing you, the transfer will take place, after informing you, only after adopting adequate guarantees, as provided by the relevant legislation.

We inform you that if you are under 16 years old (14 years if you are located on Italian territory) consent is legitimate only if given or authorized by the person holding parental responsibility. Moreover, if you are under 18 years old, you can purchase services only through a parent or guardian.

Finally, we specify that this information may be subject to periodic updates of which evidence will be given through publication on the site.