
GDPR Policy for Lapio Relax B&B
Effective Date: 01 January 2025
​​
At Lapio Relax B&B, we are committed to protecting and respecting your privacy. This policy outlines how we collect, use, and safeguard your personal data in compliance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Italian privacy laws, including Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018 (the "Italian Privacy Code").
​
1. Data Controller
The data controller for Lapio Relax B&B is:
​
Daniele Gioioso
🚩 Contrada Vignedogniche, 4 – Lapio (AV), Italy
📞 +39 3773792232
2. Data We Collect
We may collect the following personal data from our guests:
-
Contact Information: Name, email address, phone number, and postal address.
-
Booking Details: Arrival and departure dates, number of guests, and preferences (e.g., dietary requirements).
-
Payment Information: Credit card details or other payment methods (processed securely through third-party providers).
-
Communication Records: Emails, messages, or feedback provided by you.
-
Legal Requirements: Information required by Italian laws, such as passport details for registration under Article 109 of the Consolidated Law on Public Safety (Testo Unico delle Leggi di Pubblica Sicurezza, TULPS).
3. How We Use Your Data
We use your personal data for the following purposes:
-
To process and manage your booking.
-
To communicate with you regarding your stay.
-
To comply with legal and regulatory obligations under Italian law (e.g., guest registration with local authorities).
-
To improve our services based on your feedback.
-
For marketing purposes (only with your explicit consent).
4. Legal Basis for Processing
We process your data under the following legal bases:
-
Contractual Necessity: To provide the accommodation services you have requested.
-
Legal Obligation: To fulfill regulatory and legal requirements, including obligations under the Italian Privacy Code and TULPS.
-
Consent: For optional communications, such as marketing.
-
Legitimate Interests: To improve our services and ensure guest satisfaction.
5. Data Sharing
We do not sell or rent your personal data. However, we may share it with:
-
Service Providers: Third-party payment processors and booking platforms.
-
Legal Authorities: To comply with obligations under Italian law, including mandatory communication of guest data to the local Questura (police headquarters).
All third parties are required to handle your data in compliance with GDPR and Italian privacy regulations.
6. Data Retention
We retain your personal data only as long as necessary for:
-
Legal and regulatory purposes (e.g., guest data retention for 5 years as required by Italian tax laws).
-
Managing bookings and providing services.
-
Marketing communications (until you withdraw consent).
Once the retention period expires, your data will be securely deleted or anonymized.
7. Your Rights
Under GDPR and the Italian Privacy Code, you have the following rights regarding your personal data:
-
Access: Request a copy of your personal data.
-
Rectification: Correct inaccurate or incomplete data.
-
Erasure: Request the deletion of your data (subject to legal obligations).
-
Restriction: Limit how your data is processed.
-
Objection: Opt-out of certain processing activities, such as marketing.
-
Data Portability: Receive your data in a structured format.
-
Withdraw Consent: For processing based on your consent, you can withdraw it at any time.
To exercise your rights, contact us. If your concerns are not resolved, you have the right to file a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority).
8. Data Security
We implement robust security measures to protect your personal data from unauthorized access, alteration, or loss.
9. Cookies and Website Usage
If you use our website, we may collect data through cookies to enhance your browsing experience. For more information, refer to our [Cookie Policy].
10. Complaints
If you believe your data rights have been violated, you can file a complaint with:
-
Garante per la Protezione dei Dati Personali
-
Website: https://www.garanteprivacy.it
-
Email: protocollo@gpdp.it
-
11. Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website or communicated directly to you.
For any questions or concerns about this Privacy Policy, please contact us.
This version includes references to Italian legislation and compliance requirements, such as the TULPS and Italian Privacy Code. Let me know if you’d like further adjustments!
12. Contact Us
If you have any questions or concerns about this privacy policy or our data practices, please contact us:
​
Lapio Relax B&B
🚩 Contrada Vignedogniche, 4 – Lapio (AV), Italy
📞 +39 3773792232