Last update: Monday, May 28, 2018
Privacy policy of Bed-and-Breakfast.it and its network of sites *
* Network of sites: www.bed-and-breakfast.it, www.bedandbreakfast.it,
www.agriturismo.farm, www.casevacanza.online, www.topbnb.it,
www.bbcard.it, www.bb25.it, www.bbday.it, www.settimanadelbaratto.it,
www.barattobb.it, barterweek.com, barterbb.com, charmedesign.it,
inrivalmare.it, beb.it, bed-and-breakfast-sicilia.it,
agriturismo-sicilia.it, case-vacanza-sicilia.it, bblombardia.com,
bedbreakfastroma.it, worldbnb.com.
This Privacy Policy, which complies with Articles 13 and 14 of European
Union Regulation 679/2016 (hereafter referred to as
“Regulation”), describes the way we collect, use, treat, and
communicate data that concerns you, including personal data, in relation
to your access and use of our network of websites and any mobile
applications related to them.
Personal data, such as name, email, and telephone numbers, are used only
to facilitate the exchange of information between the traveller and
operator of tourist facilities to allow online bookings. Under no
circumstances is data sold to third parties.
When Bed-and-breakfast.it, the Bed-and-Breakfast.it platform, the
platform, one of our Network* sites or “Network,” “our
sites”, “network websites,” “we,”
“us,” or “our” are mentioned in this document,
Studio Scivoletto s.r.l. (VAT Number 01194800882) is being referred to as
the company that is responsible for your data according to this Privacy
Policy (the “Data Controller”).
The services offered by the Data Controller are intended for users over
the age of 18. If the Data Controller discovers that the data of minors
under the age of 18, without the valid consent or their parents or legal
guardian(s) is being treated, it reserves the right to unilaterally
interrupt the use of the services offered, as well as delete the acquired
data.
Definitions
The following categories of users, which is covered by the information in
this document regarding the usage of the sites, are used to distinguish
between:
-
Users that are travellers (or also travellers): users
of the network of sites in search of tourist facilities that they would
like to book;
-
Users that are platform operators (or also operators):
physical persons and/or legal representatives who activate a pay card on
the network as operators of tourist facilities to publicize themselves
to the travellers on the site.
The travellers may use the search and selection services of the tourist
facilities anonymously. For other services such as the publication of an
advertisement, reservation requests, the receipt of information and
automatic updates, all users, including both travellers and operators,
must register. If a traveller does not register in advance, he or she will
automatically be prompted to do so the first time a reservation request is
made.
Immediate access to the data that affects you
All data in our possession that concerns you is included in the following
sections of this document and can easily be viewed, modified, or deleted
at any time using your account credentials to access it.
If you are a TRAVELLER who has made a request and/or
reservation on any of the network sites, the data can be found through the
link:
https://www.bed-and-breakfast.it/utenti/
Your user account is automatically created with a
random password at the precise time that you first make your request for
information and/or reservations at one of the tourist facilities
featured on one of the network sites. You are simultaneously notified by
email with the instructions necessary to manage it. This is to provide
you with the opportunity to manage (modify/delete) all the data
personally, at any time.
The username necessary to access your account is your email. If you do
not remember your password, you can a request that a link be sent to
your email that will allow you to reset it.
If you are an OPERATOR of a tourist facility registered
with a regular contract at Bed-and-Breakfast.it and/or one of its network
sites, you will be able to manage your data from the dedicated Reserved
Area with the username and password chosen at the time of registration.
https://www.bed-and-breakfast.it/ar/
If you forget this data, you can request that instructions be sent to
the email address you indicated when registering your tourist facility
to retrieve your login information (username and password). The password
you choose is encrypted and stored so that it cannot be viewed by others
under any circumstances.
Principles applicable to the treatment of personal data
The Data Controller, pursuant to and for the purposes of enforcing the
Regulations, declares that the law mentioned above provides for the
protection of individuals regarding the treatment of personal data, and
that this treatment will be based on the principles of correctness,
lawfulness, transparency, and the protection of confidentiality and
fundamental rights.
Purpose, legal grounds of the treatment and optional conferral of the data
1. Types of information collected
Bed-and-Breakfast.it collects three different types of information:
1.1 Information directly provided to us.
1.1.1 Information necessary for the use of the Bed-and-breakfast.it
platform and its network sites.
When you use the Bed-and-Breakfast.it platform, we ask for and collect the
following types of personal data. This information is necessary to
effectively execute the contract between our site and the user and allows
us to act in accordance with our legal obligations. Without this data, we
may not be able to provide the user with all the required services.
-
Account information. When you register for a new
Bed-and-Breakfast.it account, or when you request
information/availability/to make a reservation at one of the tourist
facilities registered on our network, we will ask you to provide some
data such as your name and surname, email address, and phone number.
-
Profile and advertisement data. To use certain features
on the Bed-and-Breakfast.it platform (how to book or create an
advertisement), we may ask you to provide us with further information,
including your address, mobile phone number, and profile picture, as
well as all the necessary data to create the listing for your
advertisement.
-
Other authentication information. To help create and a
maintain a secure environment, we may collect identification data (such
as a photo of your ID, passport, or driving license, if permittable by
applicable law) or other forms of ID. In the case of tourist facilities,
we may require the mandatory official registration documents such as
SCIA (Certified Start of Activity Report) or other types of documents.
-
Payment information. To use certain functionalities on
the Bed-and-Breakfast.it platform (for example, making a reservation or
creating an advertisement), we may ask you to provide payment
information (such as your bank account or credit card details) to
facilitate the processing of payments.
-
Communications with Bed-and-Breakfast.it and other members.
When you communicate with Bed-and-Breakfast.it or use the
Bed-and-Breakfast.it platform to communicate with other members, we
collect information regarding your communications and any data you
choose to provide.
1.1.2 Optional information that you may choose to provide
You can choose to provide us with additional personal data to improve your
user experience on the Bed-and-Breakfast.it platform. This additional data
will only be treated with your consent.
-
Additional profile data. As part of your
Bed-and-Breakfast.it profile, you can choose to provide us with
additional information (such as gender, preferred language(s), address,
city, and a personal description of yourself). As indicated in your
account settings, some of this data will or may be used in the future as
part of your public profile page and will be visible to others. This
data, however, can be removed at any time from your user profile and you
will always retain the right to decide personally whether to make this
data public or not.
-
Other information. You can also choose to provide us
with other information by filling out a form, completing a search,
updating, or adding information to your Bed-and-Breakfast.it account, by
responding to surveys, posting forum content, participating in
promotions, or using other features on the Bed-and-Breakfast.it
platform.
1.1.3 Necessary information for the use of payment services
To comply with the applicable law (for example, anti-money regulations)
and fulfil the contractual obligations adequately, the Data Controller
needs to collect the following information, without which you cannot use
the payment services:
-
Payment information. When the payment services are used
with respect to the payment processing, the Data Controller asks for
some payment details (such as your bank account or credit card details,
or your PayPal account email) to process payments and comply to the
applicable law.
-
Authentication and other information. If you are an
operator of a tourist facility registered on our network, the Data
Controller may request an identity check (such as photo ID, passport, or
driving license, if permitted by applicable law) or other information
that verifies your identity, such as date of birth, email address,
telephone number, and other details to provide you with payment services
and comply with applicable law.
1.2 Information collected automatically from the use of the
Bed-and-Breakfast.it platform and payment services
When you use the Bed-and-Breakfast.it platform and payment services,
information is automatically collected, including your personal data,
regarding the services and methods used. This information is necessary for
the proper execution of the contract between the site and the user and
enables us to act in accordance with our legal obligations based on our
legitimate interest, which is to improve and offer you the optimal
functionality of the Bed-and-Breakfast.it platform and payment services.
-
Location information. When certain features of the
Bed-and-Breakfast.it platform are used, information about your precise
or approximate location is collected, which is determined through
information such as your IP address or the GPS of your mobile device,
offering you a better user experience. Most mobile devices allow the
user to control or disable the location option for applications in the
device settings menu. Furthermore, if the device settings or permissions
of the device allow it, Bed-and-Breakfast.it may collect this
information even when you are not using the app.
-
Usage information. We collect information regarding
your interactions with the Bed-and-Breakfast.it platform, including, for
example, the pages or other content you view, your ad searches, bookings
made, and other tasks you have performed on the Bed-and-Breakfast.it
platform. This information is used to improve your user experience, or
to make the experience of searching for and booking a tourist facility
on Bed-and-Breakfast.it as simple as possible.
-
Login and device information. We automatically collect
login data and information on devices when a user accesses and uses the
Bed-and-Breakfast.it platform, even if the user has not yet created a
Bed-and-Breakfast.it account or has not logged in.
-
Cookies and similar technology. We use cookies and
other similar technologies, including, for example, web beacons, pixels,
and mobile device identifiers. We also may allow our business partners
to use these tracking technologies on the Bed-and-Breakfast.it platform
or involve third parties to monitor user behaviour on our behalf. You
can disable the use of cookies by accessing the settings on your
browser. The use of tracking pixels allows us to understand, for
example, when clicking on an advertisement on a site outside the
Bed-and-Breakfast.it platform is converted into a booking. In this way,
we can study the most effective advertisements and consequently optimize
our investments.
-
Transaction information. Bed-and-Breakfast.it collects
information relating to your transactions on the Bed-and-Breakfast.it
platform, including the payment instruments used, the date and time, the
amounts paid, the payment instrument expiration, the user’s
billing address, the email address linked to the PayPal account, the
IBAN, address, and other details relating to the transaction. This
information allows for the proper execution of the contract between the
site and the user and allows the latter to use and access the payment
services on our site.
1.3 Information that we collect from Third-Parties.
Bed-and-Breakfast.it may collect data, including your personal data, which
third parties provide about you when using the Bed-and-Breakfast.it
platform and payment services, or obtain information from other sources
and combine it with the information that we collect through the
Bed-and-Breakfast.it platform and payment services. We do not control,
supervise, or are responsible for the treatment of your personal data by
such third parties, therefore any request for information regarding the
disclosure of your personal information must be forwarded directly to the
third parties.
-
Third-party services. If you log in, connect, or access
your Bed-and-Breakfast.it account through a third-party service (for
example, Google or Facebook) this tool might send us information such
as, for example, your registration data and your user profile associated
with this service. The data sent to Bed-and-Breakfast.it varies and is
controlled by the service itself, depending on the authorizations you
have given to the services involved in relation to the privacy settings.
-
References. The references written about you will be
published on your public profile page on Bed-and-Breakfast.it with your
consent.
-
Other sources. we may receive additional information
concerning you to the extent permitted by the applicable laws,
including, for example, demographic data or fraud detection information,
from service providers and/or third-party partners and combine them with
the information in our possession. For example, we may receive the
results of background checks (with your consent, when required) or fraud
reports from industry service providers, such as identity verification
companies, which is in line with our fraud prevention efforts and risk
assessments. We may receive information about you and your activities on
the Bed-and-Breakfast.it platform or outside of it, or about your
experiences and interactions with our third-parties and networks,
through these partnerships.
2. How the data collected is used
Bed-and-Breakfast.it uses, stores, and processes your data, including
personal data, to provide, understand, improve, and develop the
Bed-and-Breakfast.it platform, creating and maintaining a reliable and
secure environment and complying with its legal obligations.
2.1 Providing, improving, and developing the Bed-and-Breakfast.it
platform.
- Allows you to access and use the Bed-and-Breakfast.it platform.
-
Allows you to communicate with other platform members, both users who
are operators and travellers.
- Provide customer assistance.
-
Sending service or customer support messages, such as updates, security
alerts, and account notifications.
-
Manage, protect, improve, and optimize the Bed-and-Breakfast.it platform
and the experience of our users, as well as personalize your experience
(such as organizing search results or showing advertisements based on
your research). To do this, for example, among other things, we create a
profile based on your interactions with the Bed-and-Breakfast.it
platform, the history of your bookings and searches, profile and
preference data, and other content you send through the
Bed-and-Breakfast.it platform.
We treat the data provided in accordance with our legitimate interests
regarding the improvement of our Bed-and-Breakfast.it platform and the
experiences of travellers and operators, and where necessary, to ensure
the proper execution of the contract between the site and the user.
2.2 Create and maintain a more reliable and secure environment
-
Detect and prevent fraud, spam, abuse, security breaches, and other
harmful activities from occurring.
- Carry out safety investigations and risk assessments.
-
Verify or authenticate the information or identification you provide
(for example, verify the address of your facility or compare your
identification photo with another photo that you have provided).
-
Perform checks by cross-referencing databases and other sources of
information, including legal background checks, to the extent permitted
by applicable law and with your consent when required.
- Fulfil our legal obligations.
-
Resolve any disputes with our members and assert our rights against
third parties.
-
Ensure the application of our Terms of Services and other policies.
-
In connection with the activities described above, we may create a
profile based on your interaction with the Bed-and-Breakfast.it platform
and information obtained from third parties. In a few cases, automated
processes may limit or suspend access to the Bed-and-Breakfast.it
platform if they detect a potentially risky member or activity that
threatens the security of the Bed-and-Breakfast.it platform, other
members, or third parties.
We treat the information provided based on our legitimate interest in
protecting our Bed-and-Breakfast.it platform, evaluating the proper
execution of the contract between the site and the user, as well as
complying with applicable laws.
2.3 Provide, personalize, evaluate, and improve our advertising and
marketing
-
Send promotional messages, marketing information, advertising, and other
information that may be of interest to you based on your preferences
(including information regarding the campaigns and services of
Bed-and-Breakfast.it and its partners) and social media advertising
through various social media platforms (for example, Facebook and
Google).
- Personalize, evaluate, and improve our advertising.
-
Manage referral programs, awards, surveys, prize competitions, or other
promotional activities or events sponsored or managed by
Bed-and-Breakfast.it or our partners.
-
Create a profile based on your characteristics and preferences (based on
the information you provide, your interactions with the
Bed-and-Breakfast.it platform, the information obtained from third
parties, and your booking and search history) to send you promotional
messages, marketing, advertising, and other promotional material that we
think may interest you.
We will treat your personal data for the reasons listed in this section
based on our legitimate interest in marketing products or services to you
that you might potentially be interested in. You can choose not to receive
marketing communications from us by following the instructions to
unsubscribe described inside the communications, or by changing the
notification settings on your Bed-and-Breakfast.it account.
2.4 Methods of using the data collected by the Data Controller with
respect to the processing of payments
- Allow access and use of the payment services.
-
Detect and prevent fraud, abuse, security breaches, and other harmful
activities from occurring.
- Carry out safety investigations and risk assessments.
-
Perform checks, making cross-checks with databases and other sources of
information.
-
Fulfil our legal obligations (such as anti-money laundering
regulations).
-
Ensure the application of our Terms of Services and other payment
policies.
-
Upon your consent, send you promotional messages, marketing information,
advertising, and other information that may be of interest to you based
on your preferences.
The Data Controller of the payment processes treats the information
collected in the legitimate interests regarding the improvement of the
payment services and the experience of its users, as well as ensuring the
proper execution of the contract with the user and complying with the
applicable laws where necessary.
3. Sharing and communicating
3.1 With your consent.
We may share your data, including your personal data, with your consent,
for example when you authorize an application or a third-party website to
access your Bed-and-Breakfast.it account, or when you participate in
promotional activities sponsored by Bed-and-Breakfast.it partners or third
parties.
3.2 Sharing between members.
To help facilitate bookings or other interaction between members, we may
need to share specific information, including personal data, with other
members, to the extent necessary to ensure the proper execution of the
contract between the site and the user, such as those illustrated in the
scenarios below:
-
When, as a traveller, you submit a booking request, some information
about you is shared with the operator of the tourist facility, including
your first and last name, the full name of additional guests, your
cancellation history, and other information that you agree to share.
When your booking is confirmed, we will share additional information,
including your phone number, to assist you with organizing your trip.
-
When, as the operator of a tourist facility, you have confirmed a
booking, some of your data will be shared with the traveller to manage
the booking, including, for example, your name and surname, telephone
number, and the address of the facility.
-
When, as a traveller, you invite other travellers to participate in a
booking, your first and last name, travel dates, the operator of the
tourist facility’s name, the details of the advertisement, the
address of the facility, and other relevant information will be shared
with each additional guest.
-
When, as a traveller, you initiate a booking request with group payment,
some information regarding the other participants, such as name,
initials of the surname, profile picture, and booking details, are
shared among all the participants of the request in question.
We do not share your billing and payment information with other members.
3.3 Profiles, advertisements, and other public information
The Bed-and-Breakfast.it platform allows you to publish information,
including personal data, which is visible to the public. For example:
-
Parts of your public profile page, including, for example, your name,
profile description, and city are publicly visible to other users.
-
The advertisement pages are visible to the public and include
information such as the precise location of your tourist facility, the
advertisement description, the calendar availability, your public
profile photo, aggregate information on the application (for example,
the number of page views in a given period), and any additional
information that helps travellers decide whether to book the facility.
-
After completing a booking, travellers and operators can write reviews
and rate each other. Reviews and ratings are part of your public profile
page and can be viewed on other parts of the Bed-and-Breakfast.it
platform (such as the advertisement page).
-
If you post content on a community or discussion forum, blog, or social
media, or use a similar functionality on the Bed-and-Breakfast.it
platform, such content will be publicly visible.
Based on our legitimate interests in promoting the Bed-and-Breakfast.it
platform, we may make parts of it visible (for example, your advertisement
page) on the websites of Bed-and-Breakfast.it partners, using technologies
such as widgets or APIs. If your advertisements are shown on a
partner’s site, it is possible that the data on the public page of
your profile may also be visible.
The data that you publicly share on the Bed-and-Breakfast.it platform can
be indexed by search engines not managed by Bed-and-Breakfast.it. In some
cases, you can opt out of this feature through your account settings. If
you change your settings or the content that is publicly accessible, these
search engines cannot update their databases. We are not responsible for
the practices of third-party search engines and these may use cache
containing data that is not updated.
3.4 Additional services managed by the operators of tourist facilities.
Operators may need to use third-party services available through the
Bed-and-Breakfast.it platform to assist them in managing the accommodation
or to provide additional services requested to you, such as, for example,
cleaning or access to the facility. The operators may use the features
available on the Bed-and-Breakfast.it platform to share information about
the guest (for example, check-in and check-out dates, the name and
telephone number of the guest) with such third-party service providers to
organize the stay, manage the accommodation, or provide other relevant
services.
3.5 Compliance with the law, response to requests from public authorities,
prevention, and protection of rights.
Bed-and-Breakfast.it may communicate your data, including personal data,
to courts, public authorities, government authorities, or third parties
authorized in the event and to the extent that we are required or
authorized to do so by law or if such communication is reasonably
necessary: (i) to comply with our legal duties; (ii) to comply with legal
procedures and respond to claims made against Bed-and-Breakfast.it; (iii)
to find verified requests relating to a criminal investigation or an
alleged or allegedly illegal activity or any other activity likely to
expose Bed-and-Breakfast.it, yourself, or any of our other users to legal
liabilities; (iv) to manage and enforce our Terms of Service, Terms of