PRIVACY NOTICE — B&B SANTALÒ
(pursuant to articles 13 and 14 of EU Reg. 2016/679 - GDPR)
1. DATA CONTROLLER
B&B Santalò — Giuseppe Acquafredda, Bitonto (BA), Italy.
Contact for exercising rights: [insert dedicated email].
2. DATA COLLECTED
Personal data (first name, last name, date of birth), contacts (email, phone), ID document details (collected at check-in pursuant to art. 109 of the Italian Consolidated Public Security Act), payment data (handled through a PCI-DSS compliant external gateway), any preferences communicated by the Guest.
3. PURPOSES AND LEGAL BASES
a) Performance of the accommodation contract (art. 6.1.b GDPR): booking management, communications, invoicing.
b) Legal obligations (art. 6.1.c GDPR): communication of data to the Italian Police via the Alloggiati Web portal; tax and accounting obligations; ISTAT reporting.
c) Legitimate interest (art. 6.1.f GDPR): protection in case of disputes or damages.
d) Consent (art. 6.1.a GDPR): any promotional communications, only upon optional opt-in.
4. RETENTION
- Booking and invoicing data: 10 years (civil and tax obligations).
- Data transmitted to Alloggiati Web: communicated within 24 hours of check-in; not retained internally beyond this term.
- Marketing data: until consent is withdrawn.
5. RECIPIENTS
Data may be communicated to: Italian Police (Alloggiati Web), Studio Tumolo (tax advisor), technology providers (Kross Booking S.r.l. as data processor, Supabase for storage, payment gateways). No dissemination to third parties for different purposes.
6. EXTRA-EU TRANSFERS
Any data transfers outside the European Union take place exclusively to parties that guarantee an adequate level of protection pursuant to Chapter V of the GDPR (standard contractual clauses or adequacy decisions).
7. RIGHTS OF THE DATA SUBJECT
The Guest has the right to: access their data, request rectification or erasure, restrict processing, object to processing, obtain data portability, withdraw consent, lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. PROVISION
The provision of data for contractual and legal purposes is mandatory; refusal makes it impossible to finalise the booking and stay.