Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Information We Collect

We may collect personal information that you voluntarily provide when:

• Contacting us through email
• Contacting us via WhatsApp
• Making a reservation request
• Communicating with us regarding your stay

The information we may collect includes:

• Full name
• Email address
• Telephone number
• Reservation details
• Arrival and departure dates
• Number of guests
• Special requests or preferences
• Any information you choose to provide in communications

3. How We Use Your Information

We use personal information solely for legitimate hospitality and customer service purposes, including:

Reservation Management

• Respond to booking inquiries
• Confirm reservations
• Manage guest stays
• Communicate regarding arrivals, departures, and accommodation details

Customer Support

• Respond to questions and requests
• Provide assistance before, during, and after your stay

Legal Obligations

• Comply with applicable Albanian laws and regulations
• Fulfill tax, accounting, and registration requirements applicable to accommodation providers

4. Legal Basis for Processing

Where applicable under the General Data Protection Regulation (GDPR), we process personal data based on:

• The performance of a contract (reservation and accommodation services)
• Compliance with legal obligations
• Our legitimate interest in operating and improving our hospitality services
• Your consent where required by law

5. Booking Platforms

Reservations may also be made through third-party booking platforms such as:

• Booking.com
• Airbnb

When you make a reservation through these platforms, your personal data may also be processed according to their respective privacy policies. We encourage you to review the privacy policies of those providers before making a reservation.

6. Website Usage Data

When you visit our website, certain technical information may be automatically collected by your browser, including:

• IP address
• Browser type
• Device information
• Date and time of access
• Pages visited

This information is used solely for website operation, security, and troubleshooting purposes.

Villa Castriota does not use Google Analytics, Google Ads, Facebook Pixel, or similar advertising and behavioral tracking services.

7. Cookies

Our website may use essential cookies necessary for the proper functioning of the website.

These cookies help:

• Maintain website functionality
• Improve security
• Enable basic user experience features

We do not use advertising or marketing cookies.

You may configure your browser to refuse cookies; however, some website functions may not operate correctly.

8. Sharing of Personal Information

We do not sell, rent, or trade personal information.

Personal information may be shared only when necessary with:

• Booking platform providers
• IT and website service providers
• Legal authorities where required by law
• Accounting or professional advisors when legally necessary

All such parties are required to handle personal information securely and in accordance with applicable laws.

9. Data Retention

We retain personal information only for as long as necessary to:

• Manage reservations and guest services
• Comply with legal and regulatory obligations
• Resolve disputes or enforce agreements

When personal information is no longer required, it is securely deleted or anonymized.

10. Data Security

We implement reasonable technical and organizational measures to protect personal information against:

• Unauthorized access
• Loss
• Misuse
• Alteration
• Disclosure

Although we strive to protect your information, no method of electronic transmission or storage can be guaranteed as completely secure.

11. Your Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction providing similar rights, you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict processing
• Object to processing
• Withdraw consent where consent is the legal basis
• Request data portability
• Lodge a complaint with a competent supervisory authority

To exercise these rights, please contact us at: villacastriota@gmail.com

12. Children's Privacy

Our services are not directed toward children under the age of 16.

We do not knowingly collect personal information from children without the involvement of a parent or legal guardian.

13. Third-Party Websites

Our website may contain links to third-party websites, including Booking.com and Airbnb.

We are not responsible for the privacy practices or content of external websites and encourage visitors to review their privacy policies separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices.

Any updates will be posted on this page together with a revised "Last Updated" date.

15. Contact Information

For questions regarding this Privacy Policy or the processing of personal data, please contact: