By visiting our website, using its services or interacting with the company EliBa sas and AlpeSmith Apartments, the user confirms that he has read and understood this Privacy Policy and accepts that it collects, uses, archives, transmits and discloses data personal data collected in accordance with this Privacy Policy.


In this Privacy Policy, the term “Personal Data” is used with reference to any information that allows to identify directly or indirectly the user (or a third party whose data the user provides), including any information related to ” purchase of goods or services, or that the user chooses to communicate to or share with it, or with third parties, while using our website or directly at our facility. The processing of personal data will take place in accordance with the General Data Protection Regulation (EU) 2016/679 “Reg. (EU) 2016/679 “(GDPR) and, where applicable, to the legislation of the country where the data should be collected. reserves the right to carry out further data processing, where required by law or in the context of criminal or other investigations or proceedings.



Origin of the data

EliBa sas collects personal data from the user only where the same voluntarily provides information, for example:

  1. in the case of websites that distribute and / or provide EliBa sas services: making a reservation through the website (s) as a “guest”; opening an account or modifying it; doing searches on the website; by contacting by sending a comment or a question; o requesting to receive confirmation of a booking;

  2. in the case of online booking at our residence: by filling in the customer form on our website, conversing informally during phone calls with our booking office, interacting with it or purchasing services;

  3. in the case of EliBa sas customer service: asking for assistance, particular services or post-overnight assistance;

  4. in the case of e-mails, SMS and other electronic messages: by exchanging communications between the user and EliBa sas.

If the user provides personal data of third parties (for example, family members, other customers or potential customers), the same should ensure that such third parties are informed and have authorized the use of their data as described in this Privacy Policy.

Types of data

EliBa sas may collect and use different types of personal data according to the specific purposes pursued and described below:

  1. personal information, such as name, surname, gender, age / date of birth, country of origin and other personal data that current regulations allow us to collect

  2. contact information, such as address, email address, telephone number, mobile number, any fax number and other contact information that the regulations in force allow us to collect;

  3. payment information, such as payment instrument (credit or debit card), if required, and passport number, if required for tax reasons or in relation to anti-money laundering legislation;

  4. information relating to the sale, such as data, products or services provided, amount, total of the sale, VAT number, complaints, refunds or other information relating to the sale that the regulations in force allow us to collect.


Depending on the specific circumstances in which the interaction between the user and EliBa sas took place, personal data may be used for the following purposes: online sales directly from our site.

The personal data provided by the user or collected at the time of booking, i.e. basic personal data, contact information, data relating to the individual booking, tax data, payment details, information relating to sales and any other data strictly necessary for the sale of the living room, will be used for:

  1. manage, administer and process purchases of overnight stays, sales and after-sales services, for example administrative activities, accounting, guarantees, refunds, where applicable, fraud prevention and communications with the user, including via email, for any related problem the management of the overnight stay or subsequent requests relating to the stay;

  2. comply with obligations imposed by EU laws, regulations or legislation (including anti-money laundering legislation) and make a legal claim or defend against it.

It is necessary to provide personal data for the aforementioned purposes and refusal would make it impossible to complete the purchase. Except where otherwise required to comply with local regulations in force, the processing of data for these purposes, as necessary to fulfill contractual and legal obligations, could be carried out without requiring the user’s consent.


Our website is aimed at a general audience, however its services are intended for individuals aged 18 and over. EliBa sas does not request, collect, use and deliberately disclose personal data provided by persons under the age of 18, online or at its facility. If EliBa sas learns that it has personally collected data from a minor, it will delete them. In the event that the user is not of the required age, he is invited to ask an adult (or his parents or guardian) to perform the necessary procedures to make the reservation.


The processing of personal data collected through our website takes place mainly using electronic or Internet-based means, including web analysis services hosted by servers of operating suppliers selected by EliBa sas. Access to personal data will be allowed only to authorized personnel of our facility, depending on the actual need to know such information and using access control tools on multiple levels. If EliBa sas has to transfer personal data abroad in order to pursue the purposes set out in this Privacy Policy, even where the legislation on personal data differs from that applicable in the country where the user is located, the same will take measures to ensure that such communications take place in compliance with European data protection standards or other local standards used in the country where the data is collected, so that user data remains safe and confidential.


EliBa sas has implemented suitable measures to protect the user’s personal data from accidental loss and from unauthorized access, use, modification and disclosure. When the user provides information on the order, for example, he uses SSL (Secure Socket Layer) technology, an encryption tool that guarantees security during the transmission of information over the Internet. Password controls, firewall technology and other technological and procedure-based security measures are also used in the management of this website. Despite having implemented the aforementioned security measures for their website, the user is required to know that it is not possible to guarantee 100% security. Therefore, the user provides his personal data at his own risk and, to the maximum extent permitted by applicable law. EliBa sas will not be in any way responsible for their disclosure due to errors, omissions or unauthorized actions of third parties during or after their transmission to the same. EliBa sas recommends the user to:

  1. periodically update their software to protect the transmission of data on networks (for example, antivirus software) and check that your provider of electronic communications services has adopted suitable means for the security of data transmission on networks (for example, firewalls and anti spam filters);

  2. keep confidential and do not communicate the data relating to your requests to anyone;

  3. periodically check their data.

In the unlikely event that EliBa sas deems that the security of the user’s personal data in its possession or under its control has been or may have been compromised, it will inform the user of the incident in the manner provided for by the law in force. , using the methods prescribed by it (by providing EliBa sas with your email address, the user agrees to receive such communications in electronic format through this email address).



User rights

At any time and free of charge, the user can access their data or receive their electronic personal data in a structured and commonly used machine-readable format and transmit them to another data controller (data portability), as well as have them corrected, updated, modify or delete (subject to any applicable exceptions). The user can update the data provided by contacting the same at the address provided below. Requests for deletion of data are subject to the current legal and document conservation obligations imposed on EliBa sas. If you believe that there is a problem in the way your personal data is managed, the user will have the right to lodge a complaint with the national personal data protection authority or any other country in the EU or the European Economic Area. To exercise these rights, the user can send a request by contacting our structure or directly by sending an email to or a letter by ordinary mail to the address of the registered office of EliBa sas. When contacting EliBa sas, the user must ensure that they include their name, email address, postal address and / or telephone number (s) to be sure that they can handle their request correctly.



Personal data will be kept for the duration of the commercial relationship and for as long as necessary to pursue the purposes described in this Privacy Policy. After this period, the user’s personal data will be kept only to comply with legal and regulatory obligations (for example, for 10 years, in the case of accounting purposes; for the duration of the mandatory retention obligation, in the case of tax purposes. ; etc.) or to allow us to keep proof of their respective rights and obligations.


For the purposes of this Privacy Policy and the data processing described here, it is specified that the Data Controller is the company EliBa sas, with registered office in.

For any comments or questions on this Privacy Policy and to speak with the local contact person in charge of managing requests relating to data processing, it is also possible to contact EliBa sas at the following email address:



EliBa sas at its discretion, reserves the right to change, modify, add or delete parts of this Privacy Policy at any time, by publishing the revised version on this page of its website and updating the date of the “Last modification” of indicated below.


This information comes into force on May 25, 2022