Privacy Policy

La Portineria Luxury B&B

Information on the processing of personal data pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

Your privacy is our priority. On this page you'll find all the information about how we collect, use and protect your personal data.

1. Data Controller

La Portineria by Andrea Bignotti

Address: Via Montello 1, 25054 Piancogno (BS) — Italia

Tax Code: BGNNDR84L30E333L

Email: booking@laportineria.info

Phone: +39 348 7843890

2. What personal data do we collect?

Data you provide directly

We collect personal data you provide when:

You fill out the contact form or the booking request form on our website
You subscribe to our newsletter
You communicate with us via email or phone
You check in as a guest of the property

Users who fill out the contact form

First and last name
Email address
Phone number
Message text

Source: Web form

Users who request a booking

First and last name, email address
Selected room, dates of stay
Number of adults and children

Source: Web booking form

Property guests

Identity data (ID document, date and place of birth, citizenship)

Source: Direct communication at check-in, pursuant to art. 109 T.U.L.P.S. (Italian Public Security Law)

Browsing data

IP address, user-agent, pages visited, interaction events.

Source: Technical and analytics cookies (subject to consent)

Important: We do not collect special data (art. 9 GDPR) or payment information through the website. For more information on data collected through cookies, please refer to the Cookie Policy.

3. Purposes of processing and legal basis

A) Booking management — Processing of booking requests, availability confirmation, sending of communications related to the stay.

Legal basis: art. 6 par. 1-b (pre-contractual and contractual measures) · Retention: 10 years

B) Responding to contact requests — Data provided through the contact form is used exclusively to fulfill the user's request.

Legal basis: art. 6 par. 1-f (legitimate interest) · Retention: 24 months

C) Guest registration — Communication of guest data to the Public Security Authorities, as required by art. 109 of the T.U.L.P.S.

Legal basis: art. 6 par. 1-c (legal obligation) · Retention: 5 years

D) Technical management of the website — To ensure the proper functioning, security and maintenance of the website.

Legal basis: art. 6 par. 1-f (legitimate interest) · Retention: 14 months in aggregated form

E) Statistical analysis — In anonymous and aggregated form, to improve the services offered and the browsing experience.

Legal basis: art. 6 par. 1-a (consent) · Retention: 14 months

F) Informational newsletter — Sending communications related to services and news about the property, subject to the user's explicit consent. Consent can be withdrawn at any time.

Legal basis: art. 6 par. 1-a (consent) · Retention: until consent is withdrawn

G) Legal obligations — To comply with obligations under current legislation, including tax and accounting obligations.

Legal basis: art. 6 par. 1-c (legal obligation) · Retention: 10 years

4. How is the security of your data ensured?

The processing of personal data is carried out by means of computerized and/or telematic tools, with logic strictly related to the purposes indicated. Specific security measures are adopted to prevent data loss, illegal or improper use and unauthorized access:

HTTPS/TLS connection for all communications
Regular backups for the protection of stored data
Permission segregation on a "need-to-know" basis
Regular updates of security systems

5. Recipients and data processors

Personal data will not be disclosed under any circumstances. They may be communicated to the following parties, who act as Data Processors pursuant to Art. 28 GDPR:

Public Security Authorities

Service: Sending of guest registration forms pursuant to art. 109 T.U.L.P.S.

Country: Italy

Google — Google Ireland Limited

Service: Analytics 4, Google Maps

Country: EU (data region setting)

GDPR Safeguard: SCC 2021 + IP anonymization + EU-U.S. Data Privacy Framework

Privacy Policy: business.safety.google — Privacy

Vimeo, Inc.

Service: Video hosting and playback

Country: USA

GDPR Safeguard: EU-U.S. Data Privacy Framework + SCC 2021

Privacy Policy: vimeo.com — Privacy Policy

Brevo (formerly Sendinblue) — Sendinblue SAS

Service: Newsletter sending management

Country: France (EU)

GDPR Safeguard: EU data center, DPA compliant with art. 28 GDPR

Privacy Policy: brevo.com — Privacy Policy

Data will not be transferred to third parties for marketing purposes without the prior explicit consent of the data subject. The updated list of Data Processors is available upon request by contacting the Controller.

6. International transfers

Your data resides on servers located within the European Union. Any occasional transfers to third countries (e.g. Google, Vimeo services) take place through Standard Contractual Clauses updated to 2021 and supplementary measures, or on the basis of the EU-U.S. Data Privacy Framework where applicable.

7. Your rights

At any time you can exercise the following rights (Art. 15-22 GDPR):

Access (Art. 15) Obtain information about the data we process

Rectification (Art. 16) Correct inaccurate or incomplete data

Erasure (Art. 17) Request the deletion of your data

Restriction (Art. 18) Restrict processing in certain circumstances

Portability (Art. 20) Receive your data in a structured format

Objection (Art. 21) Object to processing based on legitimate interest

Complaint: You may lodge a complaint with the Italian Data Protection Authority — www.garanteprivacy.it.
To exercise your rights, write to booking@laportineria.info. The Controller will respond within 30 days of receiving the request.

8. Cookie Policy

Our website uses technical cookies necessary for its operation and, with the user's consent, experience cookies (Google Maps, Vimeo) and measurement cookies (Google Analytics).

A banner appears on first access: you can accept, refuse or customize non-essential cookies. You can change your preferences at any time through the "Cookie settings" in the website footer.

For detailed information on types, purposes, durations and methods of managing cookies, please refer to the full Cookie Policy.

9. Optional nature of data provision

Providing the data marked as mandatory in our forms is necessary to:

Respond to your requests for information
Process booking requests
Provide you with the requested services

Failure to provide this data makes it impossible to fulfill your request.

10. Data retention

We retain your personal data for the time strictly necessary for the purposes for which it was collected, in compliance with the principles of minimization and proportionality required by the GDPR.

11. Minors

The website and services offered by La Portineria are not intended for persons under the age of 16. Minors may make bookings only through a parent or legal guardian. If the Controller becomes aware of having collected data from a minor without the consent of the parent or legal guardian, it will delete it as soon as possible.

12. Contacts

For any questions regarding the processing of your personal data or to exercise your rights, you can contact us: