Privacy Policy

Bed & Breakfast Giulia — Taormina

This Privacy Policy describes how Bed & Breakfast Giulia collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR). We encourage you to read this document carefully before using our services.

Section 1Data Controller

Controller
Katia Lamberto
Address
Via D. H. Lawrence 60, 98039 Taormina (ME), Italy
Data Protection Officer

The Data Protection Officer (DPO) can be contacted at the email address indicated above.

Section 2Legal Basis for Processing

  • Performance of the booking contract and provision of accommodation services Art. 6(1)(b) GDPR
  • Compliance with legal obligations (hospitality registers, anti-money laundering regulations) Art. 6(1)(c) GDPR
  • Legitimate interest in managing bookings and improving services Art. 6(1)(f) GDPR
  • Explicit consent for sending promotional communications via email Art. 6(1)(a) GDPR

Section 3Categories of Personal Data Collected

We collect the following categories of personal data:

3.1 Personal & Contact Data

  • Full name
  • Email address
  • Phone number
  • Residential address
  • Identity document (copy of passport or ID card) for guest registration

3.2 Payment Data

  • Credit card number (partial, for verification)
  • Billing details
  • Payment history

3.3 Browsing Data & Cookies

  • IP address
  • Browser type
  • Pages visited
  • Visit duration
  • Device used

Section 4Purposes of Processing

  • Management of bookings and invoicing
  • Provision of accommodation services
  • Compliance with legal obligations and security regulations
  • Communications relating to the booking and stay
  • Sending promotional information (only with explicit consent)
  • Statistical analysis and service improvement via Google Analytics
  • Fraud and abuse prevention

Section 5Data Recipients

  • Payment service providers (online payment gateways)
  • Booking platforms (Booking.com, Airbnb, etc.)
  • Google (for Google Analytics and advertising services)
  • Public authorities and law enforcement (if required by law)
  • Hosting providers and email services
  • Legal advisors and accountants
  • Authorised staff of the property

Section 6Data Transfers Outside the EU

Some third-party providers (such as Google and international booking platforms) may transfer data to the USA and other non-EU countries. We use international standard contractual clauses (SCCs) to ensure an adequate level of protection.

More Information

For further details on specific transfers, please contact the Data Controller at the address indicated in Section 1.

Section 7Data Subject Rights

Every data subject has the right to:

Obtain confirmation of the existence of personal data concerning them
Access data in a readable format
Obtain rectification of inaccurate or incomplete data
Request erasure ('right to be forgotten')
Restrict processing
Object to processing
Withdraw consent at any time
Lodge a complaint with the Data Protection Authority
How to Exercise Your Rights

To exercise these rights, contact the Data Controller at info@bedandbreakfastgiulia.it. Requests will be processed within 30 days of receipt.

Section 8Data Retention

Personal & contact data10 years
Payment dataMin. 6 years
Browsing data & cookies3–24 months
Identity documents30 days after stay
Email for promotional communicationsUntil consent withdrawn

Section 9Security Measures

  • SSL/TLS encryption on the website
  • Protected passwords for system access
  • Firewall and intrusion detection systems
  • Restricted data access for authorised personnel only
  • Regular backups and business continuity plans

Section 10Cookies & Tracking Technologies

The website uses the following types of cookies:

Managing Cookies

You may refuse cookies from the informational banner at first access or through your browser settings. Disabling some cookies may limit certain site functionalities.

Section 11Changes to This Policy

This policy may be updated at any time. Changes will take effect from the date of publication on the website.

Section 12Contacts

For questions about privacy or to exercise your rights, contact us:

Effective Date
January 1, 2025
Last Updated
January 1, 2025
Version
1.0

Questions About Your Data?

Your privacy matters to us. If you have any concerns or wish to exercise your rights, our team is here to help.

We use cookies to enhance your experience on our website, analyse traffic, and personalise content. You can manage your preferences at any time. Learn more

Preferences saved