PRIVACY POLICY

Privacy Policy
Chalet Val Ferret — chaletvalferret.com Last updated: June 2026

1. Data Controller
Arnouva di Biondi Marcella & C. S.N.C. Località Arnouva 1 — 11013 Courmayeur (AO), Italy VAT: IT01112380074 Email: info@chaletvalferret.com Tel: +39 0165 844959
The Data Controller is the legal entity that determines the purposes and means of processing personal data collected through this website.

2. Data collected and methods of collection
The website chaletvalferret.com collects personal data in two ways:
a) Data provided directly by the user
Contact form: through the form on the "Contacts" page, the user may submit their name, email address and a free-text message. Completing the form is optional. The data entered is stored by Wix.com Ltd. (the platform provider) in the site dashboard, and is also delivered by email to the business address.
Direct emails: users may also contact the Data Controller by writing directly to info@chaletvalferret.com. Any personal data contained in these messages (name, contact details, booking requests) is used solely to respond to the request and is not retained once the request has been fulfilled.
b) Automatically collected data
Technical and statistical data is collected automatically during browsing via cookies and analytics tools (see section 5). This data includes the IP address of the device used, browser information, pages visited, geographic origin (at country level) and duration of the visit. IP addresses are used exclusively for aggregate statistical purposes and are not cross-referenced with other personal data.

3. Purposes and legal basis for processing
Responding to contact form requests Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR)
Statistical analysis of website traffic (in aggregate and anonymised form) Legal basis: legitimate interest of the Data Controller in improving the website and its services (Art. 6(1)(f) GDPR)
Managing consent for non-essential cookies Legal basis: consent of the data subject (Art. 6(1)(a) GDPR)
Data collected through the contact form is used solely to respond to the user's request. It is not used for marketing, profiling or the sending of commercial communications.
4. Data retention

Contact form: data (name, email, message) is stored on the Wix platform for a maximum of 3 years from receipt, after which it is deleted.
Direct emails: data contained in emails sent directly to the business address is retained only for the time necessary to fulfil the request, after which it is deleted.
Browsing data: collected via analytics tools, retained in accordance with the policies of the respective providers (see section 5).

5. Analytics tools and cookies
The website uses the following tools that involve the collection of browsing data:
Wix Analytics
The website is built and hosted on the Wix platform (Wix.com Ltd.), which automatically collects statistical data on visits. Wix acts as a data processor under Art. 28 GDPR. For more information: it.wix.com/about/privacy.
Google Analytics
The website uses Google Analytics, a web analytics service provided by Google LLC (USA). Google Analytics collects browsing data via cookies to generate statistics on website usage. Data is transferred to and stored on servers in the United States. Google LLC adheres to the standard contractual clauses approved by the European Commission, which ensure an adequate level of protection for data transfers outside the EU. For more information: policies.google.com/privacy.
Consent to the use of non-essential cookies (including analytics cookies) is collected via the banner displayed when entering the site. Users may modify their preferences at any time via the cookie settings widget available on all pages of the site.

6. Disclosure of data to third parties
Personal data is not sold, transferred or disclosed to third parties for their own purposes. Data may be shared solely with:

Wix.com Ltd. — as the provider of the website hosting and management platform, acting as data processor.
Google LLC — as the provider of the Google Analytics service, limited to browsing data.

Access — obtain confirmation as to whether personal data concerning them is being processed and, if so, to access that data.
Rectification — request correction of inaccurate or incomplete data.
Erasure — request deletion of their data ("right to be forgotten"), in the cases provided for by the GDPR.
Restriction — request restriction of processing in certain circumstances.
Portability — receive the data provided in a structured, machine-readable format.
Objection — object to processing based on legitimate interest.
Withdrawal of consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Complaint — lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).