Privacy & cookies
Updated 12 October 2026
About this notice
Porobic Estate S.R.L. is the controller for this website. Contact us using the details below. This website shows real Lodgify availability and prices and links to its active external checkout for bookings for one room with adults only. The clickable design review uses example booking and access-code data. The protected guest app is a separate service linked to a real confirmed booking. Google Analytics and Google Tag Manager are not active.
What we use and why
We process technical visit data, such as IP address, requested page and time, to operate and protect the site, relying on our legitimate interest in a secure service. When you contact us, we use the information you provide to answer your request or prepare a booking, under GDPR Article 6(1)(b). Guest reviews show public author names, source, score and verified country or date where available. We rely on our legitimate interest in sharing genuine guest feedback, subject to your right to object.
Your booking-linked guest app
For the guest app, we import your booking reference, name, dates, assigned suites, booking channel, guest counts and email address where available from Lodgify. Online check-in takes place in Lodgify. Our team records its completion and children’s ages after checking the registration. These details support your stay and service requests under GDPR Article 6(1)(b), and applicable tourist-tax obligations under Article 6(1)(c). The guest guide is available through protected access. If suite codes are provided in the app, access is restricted to the assigned suite and permitted dates. The app has no identity-document upload form.
Guest access and service requests
You sign in with a personal, one-use link or a verification code sent to the email address already linked to your booking, where available. Access links, sign-in codes and session tokens are verified using hashed values. A necessary session cookie keeps you signed in. We also use hashed reference, email and network identifiers to limit misuse, based on our legitimate security interest under GDPR Article 6(1)(f). We store service requests, any message you enter, requested times, decisions, payment references and status. Stripe handles separate guest-service payments. Sign-in codes may also appear in the email content and our private delivery queue.
Reviews submitted on this website
Submitting a review here is voluntary and does not affect your booking or service. With your express consent under GDPR Article 6(1)(a), we process your submission and may publish your chosen name, rating from 1 to 5, review text, suite or property, any country you provide and submission date. We may also display a translation, with the original available. Country information is self-declared and is not independently verified. Reviews remain private until an administrator checks them before publication. We do not restrict reviews to positive feedback. You can withdraw consent at any time by writing to info@villafrancasuites.com; processing before withdrawal remains lawful. We keep a private record of your consent. To prevent spam and misuse, we process short-lived hashed browser and network identifiers based on our legitimate interest in protecting the form under GDPR Article 6(1)(f). A necessary form security cookie lasts up to one day, and a one-time submission token is valid for 30 minutes.
Cookies and your choices
Necessary storage supports security, the protected editor and your chosen preferences. Optional analytics and marketing require prior consent. When analytics is configured on this site, cookie preferences let you reject or withdraw consent without losing access to the site. Availability calendars and prices are retrieved from Lodgify through our server as you select rooms and dates. External booking pages use their own cookie controls. Instagram is a link, not an embedded tracking feed.
Service providers and external links
Hosting and security providers process technical data. Lodgify supplies booking availability and prices through requests from our server. If you continue to its external checkout, you enter your booking details there. Instagram, Airbnb and Booking.com receive data when you visit their sites. We do not receive complete card numbers. Stripe processes card payments in Lodgify’s external checkout. Where providers transfer personal data outside the EEA, the applicable safeguards must be in place, such as an adequacy decision or standard contractual clauses. Our hosting providers also store protected guest-app records and the guest guide. When transactional email is enabled, Resend processes recipient addresses, message content and delivery information for access codes and service notifications. These are service messages, not a marketing subscription. Resend’s data processing addendum describes processing in the United States and safeguards using standard contractual clauses.
How long we keep information
We retain enquiries while dealing with them and only as long as necessary for related obligations or claims. Booking and accounting records follow applicable statutory retention periods. Technical security logs are kept only as needed for security and incident investigation. Reviews remain displayed while relevant; contact us about correction or removal. Guest sign-in codes expire after 10 minutes. Personal links are one-use and expire at the earlier of 90 days and seven days after departure. Guest sessions expire at the earlier of 30 days and seven days after departure. These limits end access; they do not delete records. Automatic deletion is not currently configured for guest-app booking data, requests, authentication records, the email delivery queue or delivery receipts. No fixed deletion period has yet been set for these records.
Your rights
You may request access, correction, deletion, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests and withdraw consent at any time, without affecting earlier lawful processing. Write to info@villafrancasuites.com. You may lodge a complaint with the Italian Garante or the supervisory authority where you live or work. Providing enquiry details is optional, but we may be unable to answer without them. We do not use this site to make automated decisions with legal or similarly significant effects.
- Operator
- Porobic Estate S.R.L.
- Registered office
- Via Antonio Gramsci 6, 06073 Corciano (PG), Italia
- VAT / tax code
- 03923200541
- Property registrations
- CIN IT058091B4SQPB379Z
058091-AFF-07926