Privacy notice pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).
Translation provided for convenience: in case of discrepancy the Italian text prevails.
1. Who processes the data
The processing connected with the Residence Pianeta Maratea involves different parties, with different roles depending on the activity:
- Wegest s.r.l., Corso Umberto I n. 53, 80034 Marigliano (NA), Italy, VAT no. 09794401217 (info@residencepianetamaratea.it; certified e-mail info@pec.residencepianetamaratea.it): manages the website, bookings, payments, reception and the owners’ area, and handles on mandate the rental of the weeks entrusted to it.
- Condominio Residence Pianeta Maratea (tax code 92000690765), c/o its administrator Wegest s.r.l.: provides to guests the services decided by the owners’ meeting (club card, extras, transfer from the station) and holds the property’s Alloggiati Web account.
- The timeshare owner who rents out their week (the “landlord”): is a party to the rental contract; receives from Wegest the rental statement (booking code, period, amounts), not the guests’ data.
2. Processing, data and roles
| Activity | Data processed | Who decides (controller) | Legal basis (art. 6 GDPR) |
|---|---|---|---|
| Browsing and website security | IP address, date and time, pages requested, technical device data | Wegest | legitimate interest, (f) |
| Visit statistics | aggregate data only; temporary non-reversible identifier, deleted every day | Wegest | legitimate interest, (f) |
| Requests for information and quotes | name, surname, e-mail, telephone, period, group composition, message | Wegest | pre-contractual measures, (b) |
| Booking, payments, balance, cancellations and refunds | lead guest: name, surname, e-mail, telephone, language; period; occupants by age group (needed for club card, beds and cot); amounts and outcome of payments; acceptance of the terms with date, time and IP address | Wegest, for itself and as agent of the landlord | contract, (b) |
| Condominium services: club card, extras, transfer | age groups, cot, pet; for the transfer train times and number of passengers | Condominium; Wegest processes on its behalf as administrator and processor (art. 28) | contract, (b) |
| Reception and identification on arrival | check of each guest’s identity document, handover of keys, vehicle registration number for the parking space | Wegest | contract and legal obligation, (b) and (c) |
| Reporting of guests’ details to the police (Alloggiati Web, art. 109 of the Italian Public Security Act) | all guests: surname, name, sex, date and place of birth, citizenship; for the group leader also type, number and place of issue of the document (data required by the ministerial form) | Condominio Residence Pianeta Maratea, holder of the Alloggiati Web account, through the reception run by Wegest | legal obligation, (c) |
| Tourist tax, if applied | guests subject to the tax, nights, amounts | Wegest, liable for the tax as it collects the rent (art. 4(5-ter) Decree-Law 50/2017) | legal obligation, (c) |
| Relationship with timeshare owners: reserved area, usage declarations, mandates, queue, statements, withholding tax, tax certificates | tax code, personal and contact details, IBAN, shares, declarations, mandates signed with a one-time code and signature log (date, time, IP, device), copy of the identity document, amounts | Wegest | contract and legal obligation, (b) and (c) |
| Messages on Messenger, Instagram and WhatsApp | profile name, telephone number, content | Wegest for the reply; Meta for its own processing | pre-contractual measures or contract, (b) |
| Protection of rights in case of disputes | the stay data relevant to the dispute | Wegest and, as far as it is concerned, the landlord | legitimate interest, (f) |
Card details are entered by the data subject on Stripe’s pages: Wegest only receives the outcome of the payment, the amount, the last four digits and the card network. Do not send identity documents or payment details via WhatsApp or social media. There is no profiling, no automated decision-making and no promotional mailing. Data marked as mandatory are needed to reply, to book or to comply with legal obligations: without them the request or the stay cannot be handled.
3. Data of other guests and of minors
In the online check-in the lead guest enters the data of the other guests, including minors, because the law requires them to be reported to the police. The lead guest declares that they have informed them and sends them the link to this notice, which is also displayed and available at the reception. On arrival each guest shows an identity document: the reception checks identity without photocopying the document. Minors’ data are processed only for legal obligations and for the stay, never on the basis of consent or for other purposes.
4. Recipients
Authorised staff of Wegest and of the reception; the Condominium for the services within its competence; the landlord for the rental statement; the police, the Municipality of Maratea, the tax authorities and other authorities to which communication is due; Wegest’s tax and legal advisers. Service providers:
| Provider | Service | Role | Countries and safeguards |
|---|---|---|---|
| Aruba S.p.A. | website hosting | processor (art. 28) | Italy |
| Google Ireland Ltd | e-mail, backups | processor (art. 28) | EU and United States: Google LLC certified under the EU-US Data Privacy Framework; standard contractual clauses in other cases |
| Stripe Payments Europe Ltd | card payments, refunds | independent controller for payments, fraud prevention and anti-money laundering | EU and United States: Stripe, Inc. certified under the Data Privacy Framework |
| Meta Platforms Ireland Ltd, WhatsApp Ireland Ltd | Messenger, Instagram, WhatsApp | independent controllers for their own processing | EU and United States: Meta Platforms, Inc. certified under the Data Privacy Framework |
A copy of the safeguards for transfers can be requested at the contacts in point 1. Data are not disclosed to the public.
5. How long
| Data | Retention criterion |
|---|---|
| Requests not followed by a booking | 12 months from the last contact, to answer any later requests on the same enquiry |
| Online check-in data | deleted from the booking system 30 days after departure; the receipt of transmission to Alloggiati Web provided by the ministerial service remains |
| Bookings, payments and accounting documents | 10 years from the end of the financial year (art. 2220 Italian Civil Code; art. 22 Presidential Decree 600/1973) |
| Acceptance of the terms and signature logs | as long as the related contract and, afterwards, until the rights arising from it are time-barred |
| Owners’ mandates, statements, withholding tax, tax certificates | 10 years from the end of the financial year in which the statement was issued |
| Copy of the owner’s identity document | while the declarations to which it is attached are effective; afterwards only a note of the verification remains |
| Messages on Messenger, Instagram and WhatsApp | 12 months from the last contact; if they become part of a booking or a dispute, they follow its retention period |
| Browsing data | no more than 6 months, unless needed to investigate offences |
| Visit statistics | identifier deleted every day; only aggregate data remain |
6. Rights
The data subject may request access, rectification, erasure, restriction and portability, and may object to processing based on legitimate interest (arts. 15-22 GDPR), by writing to the contacts in point 1, also for processing for which the Condominium is the controller. Data needed for legal obligations are not deleted before the periods indicated. A complaint may be lodged with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the country of residence.
7. Cookies and external links
The website only uses technical cookies; statistics do not use cookies (Cookie policy, in Italian). Payment takes place on Stripe’s website, which applies its own privacy notice and cookies. Links to Google Maps, Google reviews and social media profiles open third-party websites, subject to their respective privacy notices.
Notice updated on 11 October 2026.