Legal Information

Privacy Policy for Hotel Bacco – BACCO DI MANNOZZI MASSIMO E C. S.N.C.

In accordance with Article 13 of Regulation (EU) 2016/679 (GDPR), Hotel Bacco – BACCO DI MANNOZZI MASSIMO E C. S.N.C., with legal headquarters in Lido di Camaiore, Via Michele Rosi 24, 55041 Camaiore (LU), VAT number 00241240464, as the Data Controller, is required to provide certain information regarding the processing of personal data collected in the course of its activities.

1. Data Controller

The Data Controller of personal data is:
Hotel Bacco – BACCO DI MANNOZZI MASSIMO E C. S.N.C.
Address: Via Michele Rosi 24, 55041 Lido di Camaiore (LU)
VAT number: 00241240464
Phone: 0584 619540
Email: info@bacco-hotel.com

2. Types of Data Processed

The Data Controller collects the following categories of personal data:

• Contact data: name, surname, email address, phone number, residential address.

• Navigation data: IP address, browser type, data related to browsing on the hotel’s website.

• Stay-related data: check-in and check-out dates, preferences, special requests.

• Payment data: information related to payment for the stay (e.g., credit card data).

3. Purposes of Processing

The collected personal data will be processed for the following purposes:

• Booking management: to make and confirm stay reservations.

• Compliance with contractual and legal obligations: to manage the stay and comply with fiscal and accounting obligations.

• Marketing and communications: with consent, to send newsletters, promotional offers, and other commercial communications related to the services offered.

• Customer assistance: to respond to information requests, assistance, or special customer needs.

4. Methods of Processing

Data processing is carried out electronically and manually, ensuring the security and confidentiality of the information. The Data Controller adopts appropriate measures to protect the data from unauthorized access, loss, or disclosure.

5. Legal Basis for Processing

The processing of personal data is lawful based on the following legal grounds:

• Contract execution: for the management of bookings and stays.

• Compliance with legal obligations: e.g., for invoicing and tax management.

• Explicit consent: for marketing purposes and sending promotional communications.

6. Recipients of Data

Personal data may be shared with:

• Fiscal and administrative authorities to comply with legal obligations.

• External service providers who assist the Data Controller in managing bookings, payments, and communications (e.g., online payment systems, software providers).

• Authorized personnel within the hotel for managing bookings and requested services.

7. Data Retention Period

Personal data will be retained for the period necessary to fulfill the purposes for which they were collected, specifically:

• Booking and stay data will be kept for 10 years for fiscal and legal purposes.

• Marketing data will be retained until consent is revoked.

8. Data Subject Rights

The data subject has the right to:

• Access their personal data.

• Request the correction or deletion of data.

• Request the limitation of processing.

• Object to the processing of data for marketing purposes.

• Withdraw consent at any time, without affecting the legality of processing based on consent before the withdrawal.

• Lodge a complaint with the Data Protection Authority.

To exercise these rights, the data subject can send a request to the email address info@bacco-hotel.com.

9. Changes to This Policy

This policy may be updated periodically. In the event of substantial changes, the Data Controller will promptly communicate the modifications via appropriate channels.

Last modification: 17/03/25

This policy is drafted to ensure maximum transparency regarding the processing of personal data of Hotel Bacco’s guests, in compliance with current data protection regulations.

To manage cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the “Real Cookie Banner” consent tool. Details on how “Real Cookie Banner” works are available at https://devowl.io/rcb/data-processing/.

The legal bases for processing personal data in this context are Art. 6 (1)(c) GDPR and Art. 6 (1)(f) GDPR. Our legitimate interest is the management of cookies and similar technologies and related consents.

Providing personal data is not contractually required or necessary for the conclusion of a contract. You are not obligated to provide personal data. If you do not provide personal data, we will not be able to manage your consents.