Privacy Policy

Last updated: July 2025

This privacy policy describes how personal data of users visiting the website www.villapeaceandcolor.com (hereinafter referred to as the "Website") is processed, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Legislative Decree 196/2003 as amended (Privacy Code).

1. Data Controller

The Data Controller is Villa Peace And Color, located in Nungwi, Zanzibar, Tanzania.
Contact email: info@villapeaceandcolor.com

2. Types of Data Processed

The Website processes the following categories of personal data:

  • Browsing data: IP address, browser type, operating system, pages visited, access times. This data is collected automatically by the Website's IT systems and is stored for the time strictly necessary for service security.
  • Data provided voluntarily by the user: name, surname, and email address entered in the contact form. This data is processed exclusively to respond to the request sent.

The Website does not collect or process special categories of personal data (sensitive data) pursuant to Art. 9 GDPR.

3. Purposes and Legal Basis for Processing

  • Contact form management: data provided through the form is processed to respond to user requests. The legal basis is the execution of pre-contractual measures taken at the request of the data subject (Art. 6, par. 1, letter b GDPR).
  • Website security: browsing data is processed to ensure the IT security of the Website. The legal basis is the legitimate interest of the Data Controller (Art. 6, par. 1, letter f GDPR).
  • Third-party cookies (Google Maps): subject to user consent, Google Maps content is loaded, which may set cookies on the user's device. The legal basis is user consent (Art. 6, par. 1, letter a GDPR).

4. Processing Methods and Data Retention

Personal data is processed using electronic tools in compliance with the principles of lawfulness, fairness, transparency, data minimization, and integrity required by the GDPR. Data collected via the contact form is retained for the time necessary to handle the request and subsequently for a maximum of 24 months, unless legal obligations require longer retention.

5. Data Recipients

Personal data is not transferred to third parties, nor is it used for commercial or profiling purposes. It may be communicated exclusively to entities providing technical services essential for the Website's operation (e.g., hosting providers), bound by adequate contractual safeguards. In the case of consent to view the map, browsing data may be transmitted to Google LLC (USA), which adheres to the safeguards provided under Art. 46 GDPR.

6. Rights of the Data Subjects

Users have the right to:

  • access their personal data (Art. 15 GDPR)
  • obtain rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
  • lodge a complaint with the competent Data Protection Authority

To exercise their rights, users can write to: info@villapeaceandcolor.com

7. Cookies

For detailed information regarding the cookies used by the Website, please refer to the dedicated Cookie Policy.

8. Changes to this Policy

The Data Controller reserves the right to make changes to this privacy policy at any time. Changes will be published on this page with an indication of the last update date. Users are therefore invited to consult this page periodically.