PRIVACY POLICY

This Privacy Policy describes how B&B Ca’ Letizia processes the personal data of users who visit the website, request information, make a booking or stay at the property.

Personal data are processed in accordance with Regulation (EU) 2016/679 (“GDPR”), applicable Italian legislation and, with regard to tracking tools and cookies, the measures and guidelines issued by the Italian Data Protection Authority.

1. Data Controller

The Data Controller is:

B&B Ca’ Letizia
Via Suor Letizia 18
17026 Noli, Savona
Italy

Email: info@caletizia.com
Telephone: +39 348 988 4964

For any request concerning the processing of personal data, data subjects may contact the Data Controller using the details indicated above.

2. Categories of data processed

When users browse the website or in connection with a booking or stay, the Data Controller may process the following categories of personal data.

Identification and personal data

First name, surname, date of birth, nationality, identity document details and any other information required for guest registration in accordance with applicable legislation.

Contact details

Telephone number, email address, residential or correspondence address and any other contact information required for operational communications.

Booking and stay information

Arrival and departure dates, number of guests, special requests, preferences communicated by the user, additional services requested, organisational notes, booking history and amounts paid or payable.

Payment data

Information required to manage deposits, pre-authorisations, payments or refunds. The website or property may not directly retain full payment card details where payments are processed through specialised third-party providers.

Browsing data

IP address, date and time of visit, pages viewed, browser used, operating system, technical device identifiers, access logs and other technical information normally transmitted through internet protocols.

Data collected through forms or voluntary communications

Information provided by users through contact forms, email, telephone, messaging services or availability requests.

Data relating to specific requests

Where voluntarily provided by the user and strictly necessary for the management of the stay, additional information may be processed, for example in relation to food allergies or specific requirements. Such data must be limited to what is strictly necessary.

3. Purposes of processing

Personal data are processed for the following purposes:

a. to enable browsing of the website and ensure its proper technical operation;
b. to respond to requests for information, quotations or availability;
c. to manage bookings, confirmations, amendments, cancellations and stays;
d. to comply with administrative, accounting, tax and legal obligations;
e. to comply with guest identification and reporting obligations to the competent authorities;
f. to manage payments, deposits, security deposits, refunds or disputes;
g. to improve the operation of the website and the services offered;
h. to protect the rights of the Data Controller, including in out-of-court or judicial proceedings;
i. to send service communications relating to bookings or stays;
l. to send promotional communications or newsletters only where the user has given specific consent, where required.

Accommodation facilities in Italy are required to identify guests and transmit the relevant data to public security authorities through the Alloggiati Web system in accordance with applicable regulations.

4. Legal basis for processing

Depending on the circumstances, processing is based on the following legal grounds provided for under the GDPR.

Performance of pre-contractual measures or a contract

For the management of availability requests, bookings, stays, pre- and post-stay assistance, services requested by the user and related obligations.

Compliance with legal obligations

For tax, accounting and administrative obligations, as well as guest identification and reporting requirements to the competent authorities.

Legitimate interests of the Data Controller

For website security, prevention of misuse, management of complaints, protection of the Data Controller’s rights and improvement of services, within the limits permitted by law.

Consent of the data subject

Where required, for example for marketing activities, newsletters, non-essential cookies or other tracking technologies that are not strictly necessary.

Consent to non-essential cookies must be freely given, specific and capable of being demonstrated.

5. Methods of processing

Personal data are processed using paper-based, electronic and digital tools in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, integrity and confidentiality.

The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, improper disclosure or unlawful use, as required by the GDPR.

6. Provision of data

The provision of personal data for contact requests or bookings is partly necessary.

Failure to provide information marked as mandatory may make it impossible to:

respond to the user’s request;
confirm a booking;
provide accommodation;
comply with legal obligations.

Providing data for promotional or marketing purposes, where applicable, is optional.

7. Recipients of personal data

Personal data may be disclosed, within the limits relevant to the purposes described above, to:

a. administrative, tax, legal or IT consultants;
b. providers of technical services, hosting, website maintenance, email services, backups and cybersecurity;
c. electronic payment providers;
d. channel managers, booking engines or booking platforms;
e. public authorities, public bodies, offices and competent authorities where required by law;
f. service providers whose activities are strictly connected with the management of the stay.

Depending on the circumstances, such parties may act as independent data controllers or as data processors appointed by the Data Controller pursuant to Article 28 of the GDPR.

Personal data will not be publicly disclosed.

8. Transfers of personal data outside the EU

Where technical service providers or digital tools used by the website involve the transfer of personal data to countries outside the European Economic Area, such transfers shall take place in accordance with the conditions established by the GDPR, for example on the basis of adequacy decisions, Standard Contractual Clauses or other appropriate safeguards.

This section must be adapted to the tools actually used by the website.

9. Data retention period

Personal data are retained for no longer than necessary to fulfil the purposes for which they were collected, in accordance with the principles of the GDPR.

In particular:

data submitted in connection with information requests are retained for the time necessary to process the request and, where appropriate, for a reasonable subsequent period;
data relating to bookings and stays are retained for the period required to manage the relationship and fulfil related obligations;
administrative, accounting and tax data are retained for the periods prescribed by law;
data required for public security obligations are processed and retained in accordance with applicable legislation;
data processed for marketing purposes, where permitted, are retained until consent is withdrawn or an objection is made, unless different retention periods are justified and documented;
data collected through cookies or similar technologies are retained for the periods indicated in the Cookie Policy and according to the configuration of the tools actually used.

10. Rights of the data subject

Where provided for under the GDPR, data subjects may exercise the following rights:

right of access to their personal data;
right to rectification of inaccurate or incomplete data;
right to erasure of personal data where the relevant requirements are met;
right to restriction of processing;
right to object to processing in the cases provided for by law;
right to data portability, where applicable;
right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
right to lodge a complaint with the Italian Data Protection Authority.

Requests may be submitted using the Data Controller’s contact details provided in this Privacy Policy.

11. Data relating to minors

The website and booking services are not intended for the voluntary collection of personal data from minors without the involvement of a parent or person exercising parental responsibility.

Where personal data relating to minors are processed in connection with a booking or stay, this shall occur only to the extent necessary for the provision of the service and compliance with legal obligations.

12. Changes to this Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time, including as a result of changes in legislation, organisational arrangements or technical developments.

The updated version shall be published on the website together with the date of the latest revision.

Last updated: April 2026

COOKIE POLICY

B&B Ca’ Letizia

This Cookie Policy describes the use of cookies and similar technologies on the website www.caletizia.com.

The website is built using the Wix.com platform and uses cookies that are necessary for its proper operation.

Any cookies or tracking technologies that are not strictly necessary, where present, are used in accordance with the preferences expressed by the user through the consent management banner.

1. What are cookies?

Cookies are small text files that a website may store on the device used by a visitor while browsing.

They may be used, for example, to ensure the proper technical functioning of the website, maintain browsing security, remember certain preferences or, where provided for and authorised, collect statistical information regarding the use of the website.

The website may also use technologies with similar functions, such as local identifiers, session storage or other technical tools.

For the purposes of this Policy, all such technologies are collectively referred to as “cookies”.

2. Strictly necessary cookies

The website www.caletizia.com is built on the Wix platform.

Wix may install cookies that are strictly necessary to ensure security, stability, session management, API protection, fraud prevention and the correct functioning of website pages.

Technical cookies that may be used by the platform include:

CookiePurposeApproximate duration

XSRF-TOKENSecurity and detection of fraudulent requestsSession

hsPlatform securitySession

SVSessionSecurity, stability and core website functionalityUp to 12 months

SSR-cachingPage performance and rendering managementApproximately 24 hours

TS*Detection and prevention of attacksSession

bSessionSystem efficiency and stability measurementApproximately 24 hours

fedops.logger.sessionIdTechnical monitoring of errors and session issuesUp to 12 months

_wixAB3*Technical management of testing and platform functionalityUp to 6 months

server-session-bindAPI protectionSession

client-session-bindAPI protectionSession

oAuthStateTechnical management of identification during a sessionSession

wixSessionSecurity, stability and core website functionalityUp to 12 months

sec-fetch-unsupportedManagement of browser-related security functionsSession

The actual presence of each cookie may vary depending on the page visited, device, browser and Wix features used.

These cookies are necessary for the proper functioning of the website and do not require the user’s prior consent.

Disabling them through browser settings may affect the functioning of certain parts of the website.

3. Preference and functionality cookies

Certain website functions may use tools designed to remember preferences expressed by users, such as cookie consent choices or other settings required for browsing.

Where such tools are strictly necessary to provide a function requested by the user, they may be used without prior consent.

Where they serve additional purposes and are not strictly necessary, they are activated only in accordance with the preferences expressed through the cookie banner.

4. Analytics and statistical cookies

The website may use, where configured, tools designed to provide statistical information about how the website is used, such as the number of visits, the most frequently viewed pages, general traffic sources or technical website performance.

Where such tools cannot be regarded as technically necessary or treated as equivalent to technical cookies under applicable legislation, they are activated only after the user has given consent.

Users may accept or reject these tools through the cookie preference management system available on the website.

5. Marketing and profiling cookies

Any tools intended for advertising, remarketing, profiling or campaign measurement are used only where they are actually installed on the website and, where required by law, only after the user has provided consent.

Refusing consent to such tools does not prevent normal browsing of the website or the ability to request information or availability for a stay.

6. Third-party services and content

The website may contain links to or integrations with external services, such as booking systems, maps, messaging services, social networks, payment systems or partner websites.

Simply linking to an external website does not necessarily result in cookies being installed by that third party.

Where third-party content or services are embedded directly within website pages and involve the use of cookies or other non-essential tracking technologies, such technologies are managed in accordance with applicable legislation and, where required, are subject to the user’s consent.

Once users access external websites or services, the processing of personal data is governed by the privacy and cookie policies of the relevant providers.

7. Consent management

Where non-essential cookies or tracking technologies are used, the website provides a preference management system.

Users may:

accept optional cookies;
reject optional cookies;
modify their preferences for the available categories;
consult this Cookie Policy.

Refusing non-essential cookies does not affect access to the main content of the website.

Preferences may subsequently be changed using the “Cookie Preferences” function available on the website, where provided by the consent management system.

8. Managing cookies through the browser

Users may also manage or delete cookies directly through their browser settings.

In particular, it is generally possible to:

view stored cookies;
delete one or more cookies;
block cookies from specific websites;
block third-party cookies;
configure cookies to be deleted when the browser is closed.

However, blocking strictly necessary cookies may prevent the website or some of its features from functioning correctly.

Cookie management procedures depend on the browser used and can be found in the relevant browser’s official documentation.

9. Updates to the Cookie Policy

This Cookie Policy may be amended over time as a result of changes in legislation, technical modifications to the website, changes to the platform used or the introduction or removal of services and integrations.

The updated version shall be published on this page together with the date of the latest revision.

10. Data Controller

For information relating to the use of cookies or the processing of personal data, please contact:

B&B Ca’ Letizia
Via Suor Letizia 18
17026 Noli (SV) – Italy

Email: info@caletizia.com
Telephone: +39 348 988 4964

For further information regarding the processing of personal data, please refer to the website Privacy Policy.