PRIVACY POLICY
(pursuant to EU Regulation 2016/679 – GDPR)
1. Data Controller
The Data Controller of personal data is:
B&B La Fabbrica delle Idee
Address: Via Menegoni 43, 31010 – Fonte (TV), Italy
Email: martinasgarbossa.1@gmail.com
Phone: +39 351 556 5425
2. Types of Data Processed
The Data Controller processes the following categories of personal data:
a) Common personal data
First and last name
Email address
Phone number
Number of guests
Data necessary for managing the reservation
b) Data required by law
Identification data required by public security regulations (e.g. Alloggiati Web)
The Data Controller does not process special categories of personal data (sensitive data), except where strictly necessary to comply with legal obligations.
3. Purpose of Processing
Personal data are processed for the following purposes:
Managing contact requests
Managing reservations made via the website, WhatsApp, or external platforms
Managing the guest’s stay
Complying with legal obligations (public security, tax, and administrative requirements)
Sending organizational communications following booking confirmation
No marketing or profiling activities are carried out.
4. Methods of Processing
Data processing is carried out using electronic and telematic tools, in compliance with the principles of security, integrity, and confidentiality, adopting appropriate technical and organizational measures to prevent unauthorized access or unlawful processing.
5. Legal Basis for Processing
Personal data are processed on the basis of:
Performance of a contract or pre-contractual measures
Compliance with legal obligations
The data subject’s consent, where required (e.g. online forms)
6. Contact and Booking Forms
Through the website, users may fill in contact or booking forms.
Providing data is necessary in order to respond to requests or manage reservations.
Each form includes a specific privacy notice and an unchecked consent box, as required by the GDPR.
7. Data Retention
Personal data are retained:
For the time strictly necessary to manage the stay
Subsequently, for the period required by applicable tax, administrative, and public security regulations
Retention periods are determined according to the purpose of processing and applicable legal obligations.
8. Disclosure of Data to Third Parties
Personal data may be disclosed exclusively to:
Public authorities and public security authorities
IT and technical service providers (hosting, WordPress site management, plugins)
Online booking platforms (e.g. Booking.com)
Where applicable, such parties act as Data Processors pursuant to Article 28 of the GDPR.
Data are not disseminated.
9. Transfer of Data Outside the EU
The use of third-party services (e.g. Google Analytics, Google Maps, WhatsApp) may involve the transfer of data to countries outside the EU.
Such transfers are carried out in compliance with the safeguards provided by the GDPR.
10. Data Subject’s Rights
The data subject may exercise the rights provided for in Articles 15–22 of the GDPR, including:
Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object
Right to data portability
Requests may be sent to the Data Controller’s email address.
11. Minors
The B&B may accommodate minors.
The processing of minors’ data takes place under the responsibility of parents or legal guardians, in compliance with applicable laws.
12. Data Protection Officer (DPO)
The Data Controller has not appointed a Data Protection Officer (DPO), as this is not mandatory for the type of activity carried out.
13. Changes to the Privacy Policy
The Data Controller reserves the right to amend this policy at any time.
Any changes will be published on this page.
COOKIE POLICY
1. What Cookies Are
Cookies are small text files that websites send to the user’s device, where they are stored and then sent back to the same websites upon subsequent visits.
2. Types of Cookies Used
a) Technical cookies
The website uses technical cookies necessary for proper site operation and reservation management.
These cookies do not require user consent.
b) Third-party cookies
The website uses third-party cookies, including:
Google Analytics (via Google Tag Manager), for aggregated statistical analysis
Google Maps, for map display
WhatsApp, via a direct contact button
The use of such cookies may involve the transfer of data to countries outside the EU.
3. Consent Management
Upon accessing the website, users may:
Accept all cookies
Reject non-essential cookies
Manage preferences via a dedicated banner
Consent may be changed at any time.
4. How to Disable Cookies via the Browser
Users may disable cookies directly through their browser settings.
Disabling technical cookies may affect the proper functioning of the website.
5. Updates to the Cookie Policy
This Cookie Policy may be updated at any time.
Any changes will be published on this page.