Privacy & Cookie Policy
How we handle your data and respect your privacy.
Data Controller
Callibia SRL, Via Monte Napoleone 9, 20121 Milano, Italy, VAT IT14294060968, trading as Villino Rubini, is the data controller responsible for processing personal data collected through this website and in the course of our business, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679). Villino Rubini is the estate at Via Giacomo Scalini 62, 22034 Brunate (CO), Italy, operated by Callibia SRL.
For any questions regarding your data, please contact us at info@villinorubini.com.
What Data We Collect
Through this website we collect personal data only when you voluntarily provide it. This may include:
- Newsletter sign-up: your email address and, optionally, your name.
- Enquiry forms: your name, email address, phone number, and any details you include in your message.
- Booking requests: personal and stay details submitted through third-party booking platforms.
Business contact details that we collect from public sources, rather than from you, are described in the section Business Contacts and Prospecting below.
How We Use Your Data
Your personal data is processed for the following purposes:
- To respond to your enquiries and requests.
- To send you our newsletter, if you have opted in. You may unsubscribe at any time using the link in every email.
- To improve the website experience through anonymous, aggregated analytics.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Legal Basis for Processing
Under the GDPR, we process your data based on:
- Consent: when you subscribe to our newsletter or submit an enquiry form.
- Legitimate interest: to improve our website and services.
- Contractual necessity: to process booking requests and provide our services.
Business Contacts and Prospecting
Callibia SRL contacts companies and other organisations that may be interested in Villino Rubini for team offsites, events or corporate stays. For this purpose we use business contact details that those organisations have published themselves, for example on their own website, in public professional registers or on professional social networks. Because these details are not obtained from you directly, this section gives the information required by GDPR Article 14.
What We Hold
- Your name and job title.
- Your business email address.
- Your company, and its city and country.
- The public page where we found these details, and the date we collected them.
- A record of the messages we sent you and whether they were opened.
Legal Basis
We process these details on the basis of our legitimate interest in offering our services to businesses (GDPR Article 6(1)(f); Recital 47 recognises direct marketing as a legitimate interest). Our messages concern your professional function only, and we use the details for no other purpose. Our email service provider is SALESmanago (Benhauer sp. z o.o., Poland), which acts as our processor within the EU. We share the details with no one else.
Your Right to Object
Every message we send carries an unsubscribe link. You have the right to object to direct marketing at any time (GDPR Article 21(2)), without giving a reason. We honour every objection immediately and permanently: we stop all marketing to you and keep only your email address on a suppression list so that we do not contact you again.
Retention
We keep business contact details until you object, and in any case we delete them 12 months after our last message if you have not replied or engaged with us in that time.
How to Contact Us
To object, to ask what we hold about you, or to have your details corrected or deleted, use the unsubscribe link in any message or write to kasper@callibia.com. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the supervisory authority in your own country.
Cookies
This website uses cookies, small text files stored on your device, to ensure basic functionality and to understand how visitors interact with the site.
Essential Cookies
These are necessary for the website to function properly (e.g., remembering your cookie consent preference). They cannot be disabled.
Analytics Cookies
With your consent, we use analytics cookies to collect anonymous data about page views and site usage. This helps us improve the website. No personally identifiable information is collected through analytics cookies.
You can manage your cookie preferences at any time using the Cookie Preferences link in the site footer, or through your browser settings.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Newsletter subscriber data is kept until you unsubscribe. Enquiry data is retained for a reasonable period to follow up on your request.
Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict the processing of your data.
- Request data portability.
- Withdraw your consent at any time.
To exercise any of these rights, please email info@villinorubini.com.
Third-Party Services
This website may contain links to external services (e.g., booking platforms, social media). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the data practices of third-party sites.
Updates to This Policy
We may update this policy from time to time. Any changes will be reflected on this page. We encourage you to review this policy periodically.
Last updated: 11 September 2026