This Privacy Policy describes how Bed & Breakfast Giulia collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR). We encourage you to read this document carefully before using our services.
●Legitimate interest in managing bookings and improving servicesArt. 6(1)(f) GDPR
●Explicit consent for sending promotional communications via emailArt. 6(1)(a) GDPR
Section 3Categories of Personal Data Collected
We collect the following categories of personal data:
3.1 Personal & Contact Data
●Full name
●Email address
●Phone number
●Residential address
●Identity document (copy of passport or ID card) for guest registration
3.2 Payment Data
●Credit card number (partial, for verification)
●Billing details
●Payment history
3.3 Browsing Data & Cookies
●IP address
●Browser type
●Pages visited
●Visit duration
●Device used
Section 4Purposes of Processing
●Management of bookings and invoicing
●Provision of accommodation services
●Compliance with legal obligations and security regulations
●Communications relating to the booking and stay
●Sending promotional information (only with explicit consent)
●Statistical analysis and service improvement via Google Analytics
●Fraud and abuse prevention
Section 5Data Recipients
●Payment service providers (online payment gateways)
●Booking platforms (Booking.com, Airbnb, etc.)
●Google (for Google Analytics and advertising services)
●Public authorities and law enforcement (if required by law)
●Hosting providers and email services
●Legal advisors and accountants
●Authorised staff of the property
Section 6Data Transfers Outside the EU
Some third-party providers (such as Google and international booking platforms) may transfer data to the USA and other non-EU countries. We use international standard contractual clauses (SCCs) to ensure an adequate level of protection.
More Information
For further details on specific transfers, please contact the Data Controller at the address indicated in Section 1.
Section 7Data Subject Rights
Every data subject has the right to:
Obtain confirmation of the existence of personal data concerning them
Access data in a readable format
Obtain rectification of inaccurate or incomplete data
Request erasure ('right to be forgotten')
Restrict processing
Object to processing
Withdraw consent at any time
Lodge a complaint with the Data Protection Authority
How to Exercise Your Rights
To exercise these rights, contact the Data Controller at info@bedandbreakfastgiulia.it. Requests will be processed within 30 days of receipt.
Section 8Data Retention
Personal & contact data
10 years
Payment data
Min. 6 years
Browsing data & cookies
3–24 months
Identity documents
30 days after stay
Email for promotional communications
Until consent withdrawn
Section 9Security Measures
✓SSL/TLS encryption on the website
✓Protected passwords for system access
✓Firewall and intrusion detection systems
✓Restricted data access for authorised personnel only
✓Regular backups and business continuity plans
Section 10Cookies & Tracking Technologies
The website uses the following types of cookies:
Technical Cookies
Essential for the operation of the website. Do not require consent. Required
Analytics Cookies
Google Analytics for traffic analysis. Require consent. Consent Required
Advertising Cookies
To personalise advertising messages. Require consent. Consent Required
Managing Cookies
You may refuse cookies from the informational banner at first access or through your browser settings. Disabling some cookies may limit certain site functionalities.
Section 11Changes to This Policy
This policy may be updated at any time. Changes will take effect from the date of publication on the website.
Section 12Contacts
For questions about privacy or to exercise your rights, contact us:
We use cookies to enhance your experience on our website, analyse traffic, and personalise content. You can manage your preferences at any time. Learn more
Cookie Preferences
Choose which cookies you allow us to use. Your choice will be saved for 12 months. You can update it at any time from the footer of our website.
🔒
Strictly NecessaryAlways On
Essential for the website to function correctly. They enable core features like the booking form, security, and GDPR consent management. Cannot be disabled.
Session ID · CSRF token · Cookie consent record
📊
AnalyticsOptional
Help us understand how visitors interact with our website — which pages are most visited, how long guests stay, and where they come from. All data is anonymised.
Google Analytics · Matomo · Hotjar
🎯
MarketingOptional
Used to show you relevant advertisements when you browse other websites after visiting ours. These cookies track your visit across partner sites.
Meta Pixel · Google Ads · TripAdvisor retargeting
⚙️
PreferencesOptional
Remember your settings and choices to personalise your experience — such as your preferred language, currency, and any booking form details you have entered.
Language preference · Form autofill · PriceLabs display