Privacy Policy (Art. 13 GDPR 2016/679)

Privacy Policy (Art. 13 GDPR 2016/679)

1. Data Controller

The Data Controller for the processing of personal data is:

  • Business Name: In…Canto Bed and Breakfast di Sibona Valentino
  • Address: Via Silvio Pellico 60, 10041 Carignano (TO), Italy
  • VAT Number (P.IVA): 13505530017
  • Contact Email: vale.sibona@libero.it
  • Certified Email (PEC): vale.sibona@pec.libero.it
  • Phone / WhatsApp: +39 339 4813293

2. Types of Data Collected

While navigating or interacting with the website incantobedandbreakfast.it, the following personal data may be collected:

  • Contact and Booking Data: First name, last name, email address, phone number, and details required to manage stays submitted via contact forms or WhatsApp messages.
  • Browsing and Technical Data: IP address, browser type, access time, and pages visited (collected in an aggregated and anonymous form).
  • Data for Legal Obligations: Identification data and identity documents provided by guests upon check-in for mandatory communications to public safety authorities (Police Alloggiati Web portal).

3. Purposes and Legal Bases for Data Processing

Personal data provided is processed for the following purposes:

  • Responding to Information Requests: To reply to emails, messages, or phone calls regarding room availability and pricing.
  • Managing Bookings and Stays: For the execution of pre-contractual or contractual measures requested by the user.
  • Compliance with Legal and Tax Obligations: For invoicing, accounting administration, and the mandatory transmission of guest files to the Police Headquarters (Questura).
  • Website Functionality and Security: To ensure the proper display and navigation of the website.

4. Processing Methods and Data Retention

Data processing is carried out using IT and/or digital tools, adopting organizational methods and logics strictly related to the stated purposes, along with adequate security measures to prevent unauthorized access, disclosure, modification, or destruction of data.

Personal data is retained for the time strictly necessary to fulfill the user’s request, manage the stay, or as required by applicable tax and statutory regulations.

5. Cookie Management and Tracking Tools

Our website uses cookies and similar technologies to ensure proper page functionality and enhance the browsing experience.

  • Technical and Necessary Cookies: Essential for website operation and for storing user privacy preferences. Prior user consent is not required for installing these cookies.
  • Analytical and Third-Party Cookies: May be used to collect anonymous information about site usage and integrate external services or content (e.g., Google Maps or contact forms).

Consent and detailed cookie management are coordinated in compliance with EU regulations (GDPR) via our Cookie Policy (EU) managed by the Complianz plugin. Users may consult the dedicated page or update their preferences at any time through the cookie banner or link provided on the website.

6. Communication and Data Recipients

Personal data will not be disseminated or sold to third parties under any circumstances, except in the following necessary cases:

  • Public Safety Authorities: (e.g., Police Headquarters via the Alloggiati Web portal) to comply with statutory obligations.
  • Technical Service Providers: Hosting and web infrastructure providers operating as Data Processors (e.g., Hostinger).

7. Rights of the Data Subject

In accordance with EU Regulation 2016/679 (GDPR), users have the right to:

  • Access their personal data and request a copy.
  • Request the rectification, update, or erasure of their data (right to be forgotten).
  • Request restriction of processing or object to data processing.
  • File a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).

To exercise any of these rights, users may submit a written request to the Data Controller via email at: vale.sibona@libero.it.

8. Legal Compliance and Notification to Police Authorities (Alloggiati Web)

Guests’ personal data provided during booking or check-in (identification details and ID document data) is processed to fulfill mandatory legal obligations set forth in Art. 109 of T.U.L.P.S., which mandates reporting guest details to the competent Police Headquarters via the Alloggiati Web digital portal. Providing such data is mandatory by law; failure to do so makes it impossible to accommodate the guest at the property.

9. Data Retention Period

Collected data will be retained according to the following criteria:

  • Administrative and Tax Data: Retained for 10 years in compliance with legal obligations under the Italian Civil Code and tax regulations.
  • Contact Data for Requests or Quotes (Email, WhatsApp, Contact Form): Retained for the time strictly necessary to handle the request and no longer than 12 months, unless a contractual relationship is established.
  • Browsing Data and Cookies: Retained according to the timeframes specified in the dedicated Cookie Policy managed by the Complianz system.

10. Right to Complain to a Supervisory Authority

Without prejudice to the rights of access, rectification, erasure, and objection exercisable directly with the Data Controller, users are informed of their right to lodge a formal complaint with the Data Protection Authority under Art. 77 of Regulation (EU) 2016/679 (www.garanteprivacy.it).