Terms and Conditions Privacy Policy Cookie Policy

Last update: Monday, May 28, 2018

Privacy policy of Bed-and-Breakfast.it and its network of sites*

*Network of sites: www.bed-and-breakfast.it, www.bedandbreakfast.it, www.agriturismo.farm, www.casevacanza.online, www.topbnb.it, www.bbcard.it, www.bb25.it, www.bbday.it, www.settimanadelbaratto.it, www.barattobb.it, barterweek.com, barterbb.com, charmedesign.it, inrivalmare.it, beb.it, bed-and-breakfast-sicilia.it, agriturismo-sicilia.it, case-vacanza-sicilia.it, bblombardia.com, bedbreakfastroma.it, worldbnb.com.

This Privacy Policy, which complies with Articles 13 and 14 of European Union Regulation 679/2016 (hereafter referred to as “Regulation”), describes the way we collect, use, treat, and communicate data that concerns you, including personal data, in relation to your access and use of our network of websites and any mobile applications related to them.

Personal data, such as name, email, and telephone numbers, are used only to facilitate the exchange of information between the traveller and operator of tourist facilities to allow online bookings. Under no circumstances is data sold to third parties.

When Bed-and-breakfast.it, the Bed-and-Breakfast.it platform, the platform, one of our Network* sites or “Network,” “our sites”, “network websites,” “we,” “us,” or “our” are mentioned in this document, Studio Scivoletto s.r.l. (VAT Number 01194800882) is being referred to as the company that is responsible for your data according to this Privacy Policy (the “Data Controller”).

The services offered by the Data Controller are intended for users over the age of 18. If the Data Controller discovers that the data of minors under the age of 18, without the valid consent or their parents or legal guardian(s) is being treated, it reserves the right to unilaterally interrupt the use of the services offered, as well as delete the acquired data.


The following categories of users, which is covered by the information in this document regarding the usage of the sites, are used to distinguish between:

The travellers may use the search and selection services of the tourist facilities anonymously. For other services such as the publication of an advertisement, reservation requests, the receipt of information and automatic updates, all users, including both travellers and operators, must register. If a traveller does not register in advance, he or she will automatically be prompted to do so the first time a reservation request is made.


All data in our possession that concerns you is included in the following sections of this document and can easily be viewed, modified, or deleted at any time using your account credentials to access it.

If you are a TRAVELLER who has made a request and/or reservation on any of the network sites, the data can be found through the link:


Your user account is automatically created with a random password at the precise time that you first make your request for information and/or reservations at one of the tourist facilities featured on one of the network sites. You are simultaneously notified by email with the instructions necessary to manage it. This is to provide you with the opportunity to manage (modify/delete) all the data personally, at any time.

The username necessary to access your account is your email. If you do not remember your password, you can a request that a link be sent to your email that will allow you to reset it.

If you are an OPERATOR of a tourist facility registered with a regular contract at Bed-and-Breakfast.it and/or one of its network sites, you will be able to manage your data from the dedicated Reserved Area with the username and password chosen at the time of registration.


If you forget this data, you can request that instructions be sent to the email address you indicated when registering your tourist facility to retrieve your login information (username and password). The password you choose is encrypted and stored so that it cannot be viewed by others under any circumstances.


The Data Controller, pursuant to and for the purposes of enforcing the Regulations, declares that the law mentioned above provides for the protection of individuals regarding the treatment of personal data, and that this treatment will be based on the principles of correctness, lawfulness, transparency, and the protection of confidentiality and fundamental rights.



Bed-and-Breakfast.it collects three different types of information:

1.1 Information directly provided to us.

1.1.1 Information necessary for the use of the Bed-and-breakfast.it platform and its network sites.

When you use the Bed-and-Breakfast.it platform, we ask for and collect the following types of personal data. This information is necessary to effectively execute the contract between our site and the user and allows us to act in accordance with our legal obligations. Without this data, we may not be able to provide the user with all the required services.

1.1.2 Optional information that you may choose to provide

You can choose to provide us with additional personal data to improve your user experience on the Bed-and-Breakfast.it platform. This additional data will only be treated with your consent.

1.1.3 Necessary information for the use of payment services

To comply with the applicable law (for example, anti-money regulations) and fulfil the contractual obligations adequately, the Data Controller needs to collect the following information, without which you cannot use the payment services:

1.2 Information collected automatically from the use of the Bed-and-Breakfast.it platform and payment services

When you use the Bed-and-Breakfast.it platform and payment services, information is automatically collected, including your personal data, regarding the services and methods used. This information is necessary for the proper execution of the contract between the site and the user and enables us to act in accordance with our legal obligations based on our legitimate interest, which is to improve and offer you the optimal functionality of the Bed-and-Breakfast.it platform and payment services.

1.3 Information that we collect from Third-Parties.

Bed-and-Breakfast.it may collect data, including your personal data, which third parties provide about you when using the Bed-and-Breakfast.it platform and payment services, or obtain information from other sources and combine it with the information that we collect through the Bed-and-Breakfast.it platform and payment services. We do not control, supervise, or are responsible for the treatment of your personal data by such third parties, therefore any request for information regarding the disclosure of your personal information must be forwarded directly to the third parties.


Bed-and-Breakfast.it uses, stores, and processes your data, including personal data, to provide, understand, improve, and develop the Bed-and-Breakfast.it platform, creating and maintaining a reliable and secure environment and complying with its legal obligations.

2.1 Providing, improving, and developing the Bed-and-Breakfast.it platform.

We treat the data provided in accordance with our legitimate interests regarding the improvement of our Bed-and-Breakfast.it platform and the experiences of travellers and operators, and where necessary, to ensure the proper execution of the contract between the site and the user.

2.2 Create and maintain a more reliable and secure environment

We treat the information provided based on our legitimate interest in protecting our Bed-and-Breakfast.it platform, evaluating the proper execution of the contract between the site and the user, as well as complying with applicable laws.

2.3 Provide, personalize, evaluate, and improve our advertising and marketing

We will treat your personal data for the reasons listed in this section based on our legitimate interest in marketing products or services to you that you might potentially be interested in. You can choose not to receive marketing communications from us by following the instructions to unsubscribe described inside the communications, or by changing the notification settings on your Bed-and-Breakfast.it account.

2.4 Methods of using the data collected by the Data Controller with respect to the processing of payments

The Data Controller of the payment processes treats the information collected in the legitimate interests regarding the improvement of the payment services and the experience of its users, as well as ensuring the proper execution of the contract with the user and complying with the applicable laws where necessary.


3.1 With your consent.

We may share your data, including your personal data, with your consent, for example when you authorize an application or a third-party website to access your Bed-and-Breakfast.it account, or when you participate in promotional activities sponsored by Bed-and-Breakfast.it partners or third parties.

3.2 Sharing between members.

To help facilitate bookings or other interaction between members, we may need to share specific information, including personal data, with other members, to the extent necessary to ensure the proper execution of the contract between the site and the user, such as those illustrated in the scenarios below:

We do not share your billing and payment information with other members.

3.3 Profiles, advertisements, and other public information

The Bed-and-Breakfast.it platform allows you to publish information, including personal data, which is visible to the public. For example:

Based on our legitimate interests in promoting the Bed-and-Breakfast.it platform, we may make parts of it visible (for example, your advertisement page) on the websites of Bed-and-Breakfast.it partners, using technologies such as widgets or APIs. If your advertisements are shown on a partner’s site, it is possible that the data on the public page of your profile may also be visible.

The data that you publicly share on the Bed-and-Breakfast.it platform can be indexed by search engines not managed by Bed-and-Breakfast.it. In some cases, you can opt out of this feature through your account settings. If you change your settings or the content that is publicly accessible, these search engines cannot update their databases. We are not responsible for the practices of third-party search engines and these may use cache containing data that is not updated.

3.4 Additional services managed by the operators of tourist facilities.

Operators may need to use third-party services available through the Bed-and-Breakfast.it platform to assist them in managing the accommodation or to provide additional services requested to you, such as, for example, cleaning or access to the facility. The operators may use the features available on the Bed-and-Breakfast.it platform to share information about the guest (for example, check-in and check-out dates, the name and telephone number of the guest) with such third-party service providers to organize the stay, manage the accommodation, or provide other relevant services.

3.5 Compliance with the law, response to requests from public authorities, prevention, and protection of rights.

Bed-and-Breakfast.it may communicate your data, including personal data, to courts, public authorities, government authorities, or third parties authorized in the event and to the extent that we are required or authorized to do so by law or if such communication is reasonably necessary: (i) to comply with our legal duties; (ii) to comply with legal procedures and respond to claims made against Bed-and-Breakfast.it; (iii) to find verified requests relating to a criminal investigation or an alleged or allegedly illegal activity or any other activity likely to expose Bed-and-Breakfast.it, yourself, or any of our other users to legal liabilities; (iv) to manage and enforce our Terms of Service, Terms of Payment, or other agreements with members; (v) to protect the rights, property, or personal security of Bed-and-Breakfast.it, its employees, its members, or the public in general.

Where appropriate, we may inform members about such legal claims, unless: (i) providing such information is prohibited by the applicable legal procedure, based on an order received by the court or according to the law, or (ii) we believe that the notice is useless or ineffective, creates a risk of injury or physical harm to an individual or group of individuals, or creates or increases the risk of fraud against the property of Bed-and-Breakfast.it, its members, and the Bed-and-Breakfast.it platform. In cases where Bed-and-Breakfast.it complies with the legal requests for the communication of data without providing notice to the user for the reasons mentioned above, Bed-and-Breakfast.it will try to inform the user concerned about the request as soon as it determines in good faith that this is no longer prohibited.

3.6 Service providers.

Bed-and-Breakfast.it uses or may use in the future a variety of third party service providers to provide services related to the Bed-and-Breakfast.it platform and the payment services. The providers of these services may be located inside or outside the European Economic Area (“EEA”).

For example, service providers can help us to: (i) verify your identity or identity documents; (ii) verify information against public databases; (iii) conduct criminal background checks, fraud prevention, and risk assessments; (iv) provide technical assistance, maintenance, and product development services; (v) assist in the supply of Bed-and-Breakfast.it services; (v) assist in the supply of Bed-and-Breakfast.it services through third-party platforms and software (for example through the integration of our APIs), or (vi) provide customer, advertising, or payment support services. Such providers have limited access to the execution of the transactions on our behalf and are contractually bound to protect and use such data in accordance with the purposes for which they have received them and this Privacy Policy.

Bed-and-Breakfast.it will have to communicate your data, including your personal data, to guarantee the proper execution of the contract stipulated with you.

3.7 Social networking platforms.

We may use some of your personal information when permitted by applicable law, such as your email address, sharing it with social media platforms such as Facebook or Google, to generate leads and redirect traffic to our websites and promote products and services on the Bed-and-Breakfast.it platform. These treatment processes are based on our legitimate interests with respect to marketing and advertising products or services that may be of potential interest to you. Bed-and-Breakfast.it does not control or supervise social media platforms with which your personal data may be shared. For this reason, any questions regarding the way your personal information is treated by the social media provider must be addressed to the provider in question.

Remember that you may ask Bed-and-Breakfast.it to stop treating your data for marketing purposes at any time by sending an email to privacy@bed-and-breakfast.it.

3.8 Tax authorities.

In countries where Bed-and-Breakfast.it facilitates or requires registration, notification, permission, or licensing of a tourist facility operator with a local government authority through the Bed-and-Breakfast.it platform in compliance with local law, we may share information about the participating operators. This can include sharing information such as name, surname, contact details, address of the accommodation, tax identification codes, advertisement details, and number of nights booked with the relevant authority, both during this procedure, and if applicable, at various time intervals.

3.9 Business operations.

Should Bed-and-Breakfast.it undertake or be involved in any merger, acquisition, reorganization, transfer of business, bankruptcy, or insolvency proceedings, it may sell, transfer, or share some or all its assets, including your data, in reports or as a result of the transaction (for example, in the due diligence phase). In such cases, you will be informed before your personal data is transferred and becomes subject to a different privacy policy.

3.10 Aggregated data.

We also may share aggregated data (information about our users that we combine so that it does not identify or refer to single users) and other anonymous information for reasons of regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other commercial purposes.


4.1 Analysis of your communications

We many review, scan, or analyse your communications on the Bed-and-Breakfast.i