Privacy Notice

1. Data controller

The data controller is B&B Via Roma, Via Roma 179, 64014 Martinsicuro (TE), Italy, email viaromamartinsicuro.26@gmail.com, phone +39 375 981 2756.

2. Data collected

• Contact details given in the form: first name, last name, email and, optionally, phone number
• Details of the stay requested: arrival and departure dates, number of adults, children’s ages and any message
• Technical logs from the server hosting the site (IP address, date and time of the request)

3. Purposes and legal bases

• Replying to a quote or information request — pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR)
• Managing any booking that follows — performance of a contract (Art. 6.1.b GDPR)
• Legal obligations, including tax duties and reporting guests to the authorities — legal obligation (Art. 6.1.c GDPR)
• Site security and abuse prevention — legitimate interest (Art. 6.1.f GDPR)

4. Providing your data

The data marked as required is necessary to answer your request. Without it we cannot reply.

5. Recipients and transfers

Data entered in the form and in the booking engine is processed by Zaaac (Viale Buozzi 6/A, 63074 San Benedetto del Tronto (AP), Italy, info@zaaac.it), the booking system provider, appointed as data processor under Art. 28 GDPR. The site is hosted on Cloudflare infrastructure, also a data processor. The booking form uses Google reCAPTCHA for spam protection. Any transfers outside the EU are covered by appropriate safeguards, such as Standard Contractual Clauses.

Data is never published or sold to third parties for marketing purposes.

6. Retention periods

• Quote and contact requests: up to 24 months from the last meaningful contact
• Booking and tax records: 10 years, as required by law
• Technical logs: up to 12 months, unless needed for security

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to viaromamartinsicuro.26@gmail.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

8. Cookies and similar technologies

This site uses no profiling cookies and no analytics: the fonts are served from the site itself and no third-party services are called for browsing.

The booking form is loaded from the zaaac.it domain and may use technical cookies needed for it to work, along with Google reCAPTCHA.

9. Security

Data is transmitted encrypted (HTTPS) and protected with appropriate technical and organisational measures, including access control and backups.

10. Updates

This notice may be updated. The current version replaces any previous one.