Galletto di Marzo

Piccolo Relais Galletto di Marzo località vocabolo Casella II n°127 (Borgarucci) Paciano (Pg) Tel: +39 349 0803800

CIN: IT054036C101018104

Privacy Policy

This privacy policy is drafted in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and applicable national legislation on the protection of personal data. The purpose of this document is to inform users of how B&B Galletto di Marzo processes personal data, in compliance with the principles of lawfulness, fairness, transparency, and protection of the rights of the data subject.

1. Data Controller

The Data Controller is:
Benzi Luca
Address: Località Vocabolo Casella II° 127, 06060 Paciano (PG), Italy
Email: gallettodimarzo@hotmail.it
Telephone: +39 349 080 3800

2. Types of data collected

2.1 Data provided voluntarily by the user
• First and last name
• Email address
• Telephone number
• Text of message sent via contact form or email
• Booking data (dates, number of guests, requests)
2.2 Data required to manage the booking and stay
• Complete personal data
• Residential address
• Identity document required by law (Web Guests)
• Tax information for receipts or invoices
2.3 Technical browsing data
• IP address
• Technical logs
• Technical cookies required for the website to function
(No profiling cookies are active.)
2.4 Data collected offline
• Identity documents presented at check-in
• Data required for tax and administrative compliance

3. Purpose of processing

3.1 Responding to user requests
Managing communications received via contact form, email, or telephone.
3.2 Booking management
Checking availability, booking confirmation, pre-stay communications.
3.3 Compliance with legal obligations
Communications to the Public Security (Web Lodging), tax registrations, issuing receipts or invoices.
3.4 Stay management
Check-in, guest requests, operational communications.
3.5 Website security and operation
Technical cookies, security logs, abuse prevention.
3.6 Anonymous statistics
Analysis of website traffic through aggregated data that cannot be traced back to the user.

4. Legal Basis for Processing

4.1 Implementation of pre-contractual and contractual measures
To respond to requests and manage reservations.
4.2 Fulfillment of legal obligations
Website hosting, tax regulations, administrative obligations.
4.3 Legitimate Interest of the Data Controller
Site security, abuse prevention, anonymous statistics.
4.4 Consent
For data submitted voluntarily via the contact form or email.

5. Recipients of personal data

5.1 Technical service providers
Hosting, email, maintenance, and IT security.
5.2 Administrative and tax entities
Accountants, invoicing software.
5.3 Public authorities
Public Security (Web Accommodation), Revenue Agency, other authorities where required by law.
5.4 Anonymous statistics services
Tools that collect aggregate data that cannot be traced back to the user.
5.5 Booking management services
• Channel Manager: synchronizes availability and prices across portals.
• Booking Engine: manages direct bookings from the website.
• PMS: management software for bookings, check-ins, documents, and administrative activities.

6. Data Retention

6.1 Contact Data
12 months.
6.2 Booking Data
Duration of the relationship + 10 years (tax obligations).
6.3 Data for legal obligations
According to the timeframes established by Public Safety regulations.
6.4 Tax Data
10 years.
6.5 Technical Data
Technical Cookies: session duration or as indicated in the Cookie Policy.
Security Logs: up to 12 months.
6.6 Anonymous Statistics
Retention without specific limits (not personal data).

7. Hosting and External Services

7.1 Hosting
The website is hosted by a provider that guarantees security and GDPR compliance.
7.2 Email Services
Technical Management of Communications.
7.3 Channel Manager
Availability and Booking Synchronization on Portals.
7.4 Booking Engine
Direct Bookings from the Website.
7.5 PMS
Operational Management of the B&B.
7.6 Anonymous Statistics
Tools not traceable to the user.

8. Rights of data subjects

The user may exercise the rights provided for in Articles 15-22 of the GDPR:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Withdrawal of consent
• Complaint to the Data Protection Authority

Requests to: gallettodimarzo@hotmail.it

9. Transfer of data outside the EU

No systematic transfers outside the EU.
Any transfers via external providers are carried out with adequate safeguards (SCC, adequacy decisions).

10. Security measures

• HTTPS
• Firewalls and protection systems
• Regular backups
• Access limited to authorized users
• Email security
• Internal procedures for document management and bookings
• Notification of any data breaches in accordance with GDPR

11. Changes to this policy

The Data Controller may update this policy at any time.
Changes will be published on this page.
Users are encouraged to consult it periodically.

This policy is updated as of the date indicated and remains valid until a new version is published. The Data Controller undertakes to maintain the document in compliance with current legislation on personal data protection and to ensure transparent, correct, and secure processing of the data of users and guests of B&B Galletto di Marzo.