Privacy policy

1. Who handles your data

The data controller is:
M.G. di Marco Guida · VAT no. 03898460781
Via Roma 126, 87058 Camigliatello Silano (CS), Italy
Email abetebiancosocial@gmail.com · Tel. +39 0984 304902

For any question about your data, write to the email address above.

2. What we collect and why

Browsing the site

The server hosting the site automatically logs some technical data for each visit: IP address, date and time, page requested, browser type. We use them only to run the site and protect it from abuse. The legal basis is our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR). These logs are kept by the hosting provider for the period stated in its privacy policy, unless needed to investigate an offence.

Visit statistics

Only if you accept them through the cookie banner, we use Google Analytics 4 (Google Ireland Limited) to know, in aggregate, how many people visit the site, where they come from and which pages they read. Google Analytics 4 does not store full IP addresses and we do not use these data to identify or profile you. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from "Cookie preferences" at the bottom of every page. Statistical data are kept for 14 months. Details are in the cookie policy.

Enquiry form

If you write to us using the form on the Contact page, we collect your name, email, dates, room and occasion, and your message. We use them only to reply and, if you ask, to prepare a quote or booking. The legal basis is taking steps at your request before a contract (Art. 6(1)(b) GDPR). We keep the correspondence for 24 months, then delete it, unless it led to a booking.

Email, phone and WhatsApp

If you contact us by email, phone or WhatsApp, we use the data you give us to reply, on the same legal basis and for the same time as the form. WhatsApp is a service of WhatsApp Ireland Ltd. (Meta group), which processes data under its own privacy policy.

Bookings

Rooms are booked through our online booking system, where you can also request a quote: it is provided by Beddy, which processes the data on our behalf as a processor. Restaurant tables are booked through TheFork, which is the controller of the data you enter on its site, under its own policy. If you book through a portal (for example Booking.com), the portal processes your data under its own policy. Once a booking reaches us, we process your data to perform the contract (Art. 6(1)(b) GDPR) and to meet legal obligations (Art. 6(1)(c) GDPR), such as reporting guests to the police as required by Art. 109 of the Italian TULPS, tax requirements and, where applicable, the tourist tax. Tax records are kept for 10 years, as required by law.

Allergies and intolerances

If you tell us about a food allergy or intolerance, we use it only to prepare safe dishes for you, with your explicit consent (Art. 9(2)(a) GDPR), and we do not keep it beyond your stay or meal.

3. Who can see the data

Data are handled by authorised hotel staff and by suppliers who help us run the service, appointed as processors (Art. 28 GDPR):

• the website hosting provider, Hostinger, UAB (Lithuania) — Hostinger privacy policy;
• the email provider, Google (Gmail);
• Google Ireland Limited, for anonymous Google Analytics statistics, only if you consented to analytics cookies;
• Beddy, the hotel's management software, which provides the online booking system and quote requests;
• our tax advisor and accountant, for legal requirements.

Guest details are sent to the Italian State Police through the Alloggiati Web portal, as required by law. We do not sell or share your data with third parties for marketing.

4. Transfers outside the European Union

Some suppliers, such as Google, may process data outside the EU. In these cases the transfer relies on the safeguards provided by the GDPR: the EU–US adequacy decision (Data Privacy Framework) or the standard contractual clauses approved by the European Commission.

5. Links to other sites

The site links to TheFork, Google Maps, Google (reviews) and WhatsApp. When you open them you leave our site, and their own privacy and cookie policies apply.

6. Your rights

At any time you can ask us to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest, receive your data in a readable format (portability), and withdraw a consent already given, without affecting earlier processing (Arts. 15–22 GDPR). Just write to abetebiancosocial@gmail.com: we reply within 30 days.

If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

7. Other information

Providing data is optional, but without your name and email we cannot reply, and without the data required by law we cannot host you. We do not use automated decision-making or profiling. The site is not aimed at children under 14.

For cookies and similar technologies, read the cookie policy.

We may update this policy: the date at the top shows the latest change.