Personal Data Privacy Notice
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 25 August 2026.
1. Data Controller
The data controller is B&B Al Cedir, Contrada Falcone 8, 89128 Reggio Calabria, Italy (RC), Italy.
Email: bebalcedir@gmail.com — Phone: +39 347 717 3682
CIR: 080063-BBF-00066 — CIN: IT080063C17P9J4IDL
2. What Data We Collect
Data you provide. When you fill in the booking request form you provide us with: your full name, email address, telephone number, check-in and check-out dates, number of guests, room preference and any notes you choose to add.
Data collected automatically. As with any website, our hosting provider logs technical browsing data (IP address, browser type, date and time of the visit) for security and service operation purposes.
This website does not use its own cookies and does not use analytics or advertising profiling tools.
3. Why We Process Your Data and on What Legal Basis
| Purpose | Legal basis |
|---|---|
| Responding to your booking or information request | Steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Managing any stay and the resulting legal obligations (guest registration, invoicing, reporting to the authorities) | Performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR) |
| Ensuring the security and correct operation of the website | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
Providing the data marked as required in the form is necessary for us to reply: without it we cannot act on your request.
4. Third-Party Services Used by This Website
To operate, this website relies on the following external services. We expressly flag those that involve a transfer of data to the United States.
| Service | Purpose | Data involved |
|---|---|---|
| Netlify (Netlify Inc., USA) | Website hosting and receipt of forms submitted by email | Browsing data and the content of the booking form |
| Google Fonts (Google LLC, USA) | Loading the website typeface | The visitor's IP address, transmitted when the page loads |
| Google Maps (Google LLC, USA) | Interactive map in the "Where We Are" section | IP address and technical and profiling cookies set by Google |
| WhatsApp (Meta Platforms, USA) | Sending a request via the dedicated button | Only if you choose to use it: your phone number and the content of the message |
These transfers take place on the basis of the safeguards set out in Chapter V of the GDPR (the EU-US Data Privacy Framework adequacy decision and/or standard contractual clauses). You can consult the privacy notices of Google, Netlify e WhatsApp.
If you would rather not load the Google map, you can simply not scroll to that section, or block third-party cookies in your browser settings. Phone and email remain available for contacting us.
5. How Long We Keep Your Data
- Requests that do not become bookings: kept for as long as needed to handle the exchange of messages and in any case no longer than 24 months.
- Confirmed bookings: kept for the periods required by tax legislation and by the legal obligations applying to accommodation businesses (normally 10 years for accounting records).
- Technical browsing data: kept by the hosting provider for the period set out in its security policies.
6. Who We Share Your Data With
Your data is never disclosed publicly or sold to third parties. It may be shared solely with: the service providers listed in section 4, acting as data processors; our tax and accounting adviser; the public security authorities and public bodies, in the cases required by law for accommodation businesses.
7. Your Rights
You may exercise the rights set out in Articles 15-22 of the GDPR at any time, in particular the right to:
- access your data and obtain a copy of it;
- ask for it to be corrected if inaccurate or incomplete;
- ask for it to be erased, where the legal conditions are met;
- ask for processing to be restricted, or object to it;
- receive your data in a structured format and transfer it to another controller (portability);
- withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights simply write to bebalcedir@gmail.com. We will reply within one month of the request.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority.
8. Changes to This Notice
This notice may be updated to reflect changes to the website or to the law. The date of the latest update is shown at the top of the page.
Back to the site