Privacy & Cookie Policy

Updated: October 2026

Privacy Policy

Welcome to domodossolabeb.com. Your privacy and the security of your personal data are of the utmost importance to us. This policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Italian national data protection regulations (Legislative Decree 196/2003 as amended).

1. Data Controller

2. Types of Data Collected

Through this website or direct contact, we process the following personal data:

• Contact and booking data: First name, last name, email address, phone number, check-in and check-out dates, number of guests, and any optional notes or special requests provided voluntarily via availability requests, contact forms, or online bookings.
• Technical and browsing data: IP addresses, session identifiers, browser type, access timestamps, visited pages (collected automatically and strictly necessary for technical operation, service security, and abuse prevention).

3. Purposes and Legal Basis for Processing

Your personal data is processed lawfully, fairly, and transparently for the following purposes:

• Performance of a contract (Art. 6(1)(b) GDPR): To process booking requests, confirm reservations, manage check-in/check-out procedures, and provide the agreed hospitality services at Domodossola B&B.
• Compliance with legal obligations (Art. 6(1)(c) GDPR): Mandatory reporting of guest details to the Italian Police Authority via the official "Alloggiati Web" portal (Art. 109 R.D. 773/1931 - T.U.L.P.S.), as well as fulfilling accounting, fiscal, and administrative requirements under Italian law.
• Promotional communications and Marketing (Art. 6(1)(a) GDPR): Subject to your optional and explicit consent (provided via the checkbox during booking or contact submission), for sending promotional emails, seasonal offers, and news about our properties. Withholding consent does not affect your booking in any way. You have the right to withdraw your consent at any time by clicking the unsubscribe link at the bottom of any marketing email or by writing to info@domodossolabeb.com.
• Legitimate interest and IT security (Art. 6(1)(f) GDPR): To protect our web infrastructure from unauthorized access, cyber attacks, and fraudulent activities, ensuring network and data security.

4. Online Payments and PayPal System

Electronic payments made via the online booking checkout of this site are processed through the PayPal platform, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

All sensitive payment details (credit/debit card numbers, PayPal credentials, bank details) are collected and processed directly by PayPal acting as an independent Data Controller, in full compliance with PCI-DSS security standards. Our website does not receive, view, or store any credit card numbers or financial credentials; it receives solely the transaction outcome status and order identifier. For further information on how PayPal processes personal data, please review the PayPal Privacy Statement.

5. Data Retention Period

Personal data is retained in accordance with the principles of data minimization and proportionality for the time strictly necessary to fulfill the purposes for which it was collected:

• Booking and fiscal/accounting records: Retained for the entire duration of the stay and subsequently for 10 years in compliance with Italian statutory, civil, and tax obligations (Art. 2220 Italian Civil Code).
• Incomplete contact or availability requests: Retained for a maximum period of 12 months to manage follow-up inquiries.
• Marketing and promotional data: Retained until consent is withdrawn by the user or an objection is submitted.

6. Data Subject Rights (GDPR)

Under Articles 15 to 22 of EU Regulation 2016/679 (GDPR), you have the right at any time to exercise the following rights regarding your personal data:

• Right of access (Art. 15): Obtain confirmation as to whether your personal data is being processed and obtain a copy of it.
• Right to rectification (Art. 16): Request the updating or correction of inaccurate or incomplete personal data.
• Right to erasure / Right to be forgotten (Art. 17): Request the deletion of data when it is no longer necessary for the original purposes or when required by law.
• Right to restriction of processing (Art. 18): Request the restriction of data processing under the conditions outlined in the GDPR.
• Right to data portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): Object at any time to the processing of your data based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw previously given consent at any time (e.g. for marketing), without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, you can send a written request to: info@domodossolabeb.com.