Privacy Policy

Last updated: 18 October 2026

This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) to users of www.ilmagan.it, people requesting information, and people making reservations through services connected to the website.

1. Data controllers

The relevant data controller is determined according to the property or service to which the enquiry or reservation relates. The businesses listed below are separate entities.

Azienda Agricola il Magan di Vernazzani Marco
Loc. Corniglia, 19018 – Vernazza (SP), Italy
VAT No. IT01463500114 – Tax Code VRNMRC97D21E463C
Email: info@ilmagan.it

VERNAZZANI SNC DI VERNAZZANI MANUELA E ANDREA
Via Fieschi 185, 19018 – Vernazza (SP), Italy
VAT No. IT01431990116 – Tax Code 01431990116
Email: info@vernazzani5terre.it

Azienda Agricola manages Agriturismo Il Magàn. Vernazzani SNC manages Bar La Scuna and the apartments for which it is responsible. The website may provide information about both businesses.

2. Categories of personal data

The data processed may include identification and contact details, information relating to enquiries and reservations, information needed to manage a stay and comply with administrative, accounting and tax obligations, and technical data relating to website navigation and security. Data may be provided by email or WhatsApp or entered into booking and payment systems.

3. Purposes and legal bases

• Responding to enquiries, providing availability and quotations, and managing reservations: pre-contractual measures and performance of a contract.
• Managing stays, service communications and payments: performance of a contract.
• Complying with applicable administrative, accounting, tax, public security, statistical and tourism-related obligations: compliance with a legal obligation.
• Ensuring website security and proper operation, and protecting the controller's rights: legitimate interests, where permitted by law.
• Using tools for which consent is legally required: the individual's consent, where applicable.

4. Provision of personal data

Data necessary to handle an enquiry or reservation and comply with legal obligations must be provided for those purposes. Failure to provide such data may prevent the enquiry from being answered or the service from being provided. Other data are optional.

5. Reservations and WuBook

The website uses the WuBook online booking system. When a user starts a reservation, they are redirected to the WuBook platform, where they can enter the required information.

Reservation information is managed through the booking management system used to organise the stay and comply with applicable obligations. WuBook's role and any processing carried out for its own purposes are described in the provider's documentation.

Please consult the WuBook Privacy Policy for further information.

6. Payments through Stripe

Online payments may be processed through Stripe as part of the booking process. The data required for a transaction may be processed to complete the payment and manage refunds, fraud prevention or payment disputes.

Stripe's role may vary depending on the processing activity. For further information, please consult the Stripe Privacy Center.

7. Email and WhatsApp

Information voluntarily provided by email or WhatsApp is used to respond to enquiries and manage communications relating to the services. The providers of these services may process data in accordance with their own privacy notices.

8. Recipients of personal data

Where necessary, personal data may be disclosed to IT and booking service providers, payment providers, consultants, professional advisers, banks, public authorities and other parties where disclosure is required by law.

Guest data may be communicated to the competent authorities and organisations for applicable public security, statistical, tourism and tax obligations. Where a reservation concerns an apartment managed by Vernazzani SNC, the data necessary for that reservation are processed by the relevant company.

Personal data are not sold to third parties.

9. International data transfers

Some service providers may process personal data outside the European Economic Area. Where applicable, such transfers must comply with the safeguards required by the GDPR. Please refer to the providers' privacy notices for further details.

10. Data retention

Personal data are retained for as long as necessary for the purposes for which they were collected and subsequently for the periods required by law or necessary to protect the controller's rights. Accounting and tax records are retained for the periods established by applicable law.

Enquiries that do not result in a reservation are retained for the time necessary to handle the enquiry and protect the controller's rights.

11. Cookies

Based on the current configuration and the checks carried out, the website does not integrate Google Analytics, advertising pixels or other analytics and advertising profiling tools.

The checks carried out while browsing did not identify cookies on the website's domain. Strictly necessary technical cookies may be used where required for the operation of the pages or services.

For further information, please consult the Cookie Policy Cookies and technologies used by external platforms may be subject to the notices and configurations of the respective providers.

12. External services and social media

The Cormorant Garamond and Inter fonts are hosted directly on the website's server and loaded from local files rather than through Google Fonts.

The website contains links to the following social media profiles: Facebook and Instagram. The mere presence of social media links does not mean that tracking pixels are integrated into the website. When users visit those platforms, the platforms' own privacy notices apply.

If other external resources are loaded, this may involve the transmission of technical data to the relevant providers.

13. Data subject rights

Where provided for by the GDPR, individuals may request access to their personal data, rectification, erasure or restriction of processing, object to processing, and request data portability where applicable. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Requests should be sent to the relevant data controller using the contact details in Section 1. Individuals also have the right to lodge a complaint with the Italian Data Protection Authority.

14. Updates

This Privacy Policy may be updated to reflect changes in legislation, business organisation or technical arrangements. The version published on the website is the current version.