Last update: Monday, May 28, 2018

Privacy policy of Bed-and-Breakfast.it and its network of sites*

*Network of sites: www.bed-and-breakfast.it, www.bedandbreakfast.it, www.agriturismo.farm, www.casevacanza.online, www.topbnb.it, www.bbcard.it, www.bb25.it, www.bbday.it, www.settimanadelbaratto.it, www.barattobb.it, barterweek.com, barterbb.com, charmedesign.it, inrivalmare.it, beb.it, bed-and-breakfast-sicilia.it, agriturismo-sicilia.it, case-vacanza-sicilia.it, bblombardia.com, bedbreakfastroma.it, worldbnb.com.

This Privacy Policy, which complies with Articles 13 and 14 of European Union Regulation 679/2016 (hereafter referred to as “Regulation”), describes the way we collect, use, treat, and communicate data that concerns you, including personal data, in relation to your access and use of our network of websites and any mobile applications related to them.

Personal data, such as name, email, and telephone numbers, are used only to facilitate the exchange of information between the traveller and operator of tourist facilities to allow online bookings. Under no circumstances is data sold to third parties.

When Bed-and-breakfast.it, the Bed-and-Breakfast.it platform, the platform, one of our Network* sites or “Network,” “our sites”, “network websites,” “we,” “us,” or “our” are mentioned in this document, Studio Scivoletto s.r.l. (VAT Number 01194800882) is being referred to as the company that is responsible for your data according to this Privacy Policy (the “Data Controller”).

The services offered by the Data Controller are intended for users over the age of 18. If the Data Controller discovers that the data of minors under the age of 18, without the valid consent or their parents or legal guardian(s) is being treated, it reserves the right to unilaterally interrupt the use of the services offered, as well as delete the acquired data.

DEFINITIONS

The following categories of users, which is covered by the information in this document regarding the usage of the sites, are used to distinguish between:

• Users that are travellers (or also travellers): users of the network of sites in search of tourist facilities that they would like to book;
• Users that are platform operators (or also operators): physical persons and/or legal representatives who activate a pay card on the network as operators of tourist facilities to publicize themselves to the travellers on the site.

The travellers may use the search and selection services of the tourist facilities anonymously. For other services such as the publication of an advertisement, reservation requests, the receipt of information and automatic updates, all users, including both travellers and operators, must register. If a traveller does not register in advance, he or she will automatically be prompted to do so the first time a reservation request is made.

IMMEDIATE ACCESS TO THE DATA THAT AFFECTS YOU

All data in our possession that concerns you is included in the following sections of this document and can easily be viewed, modified, or deleted at any time using your account credentials to access it.

If you are a TRAVELLER who has made a request and/or reservation on any of the network sites, the data can be found through the link:

https://www.bed-and-breakfast.it/utenti/

Your user account is automatically created with a random password at the precise time that you first make your request for information and/or reservations at one of the tourist facilities featured on one of the network sites. You are simultaneously notified by email with the instructions necessary to manage it. This is to provide you with the opportunity to manage (modify/delete) all the data personally, at any time.

The username necessary to access your account is your email. If you do not remember your password, you can a request that a link be sent to your email that will allow you to reset it.

If you are an OPERATOR of a tourist facility registered with a regular contract at Bed-and-Breakfast.it and/or one of its network sites, you will be able to manage your data from the dedicated Reserved Area with the username and password chosen at the time of registration.

https://www.bed-and-breakfast.it/ar/

If you forget this data, you can request that instructions be sent to the email address you indicated when registering your tourist facility to retrieve your login information (username and password). The password you choose is encrypted and stored so that it cannot be viewed by others under any circumstances.

PRINCIPLES APPLICABLE TO THE TREATMENT OF PERSONAL DATA

The Data Controller, pursuant to and for the purposes of enforcing the Regulations, declares that the law mentioned above provides for the protection of individuals regarding the treatment of personal data, and that this treatment will be based on the principles of correctness, lawfulness, transparency, and the protection of confidentiality and fundamental rights.

PURPOSE, LEGAL GROUNDS OF THE TREATMENT AND OPTIONAL CONFERRAL OF THE DATA

1. TYPES OF INFORMATION COLLECTED

Bed-and-Breakfast.it collects three different types of information:

1.1 Information directly provided to us.

1.1.1 Information necessary for the use of the Bed-and-breakfast.it platform and its network sites.

When you use the Bed-and-Breakfast.it platform, we ask for and collect the following types of personal data. This information is necessary to effectively execute the contract between our site and the user and allows us to act in accordance with our legal obligations. Without this data, we may not be able to provide the user with all the required services.

• Account information. When you register for a new Bed-and-Breakfast.it account, or when you request information/availability/to make a reservation at one of the tourist facilities registered on our network, we will ask you to provide some data such as your name and surname, email address, and phone number.
• Profile and advertisement data. To use certain features on the Bed-and-Breakfast.it platform (how to book or create an advertisement), we may ask you to provide us with further information, including your address, mobile phone number, and profile picture, as well as all the necessary data to create the listing for your advertisement.
• Other authentication information. To help create and a maintain a secure environment, we may collect identification data (such as a photo of your ID, passport, or driving license, if permittable by applicable law) or other forms of ID. In the case of tourist facilities, we may require the mandatory official registration documents such as SCIA (Certified Start of Activity Report) or other types of documents.
• Payment information. To use certain functionalities on the Bed-and-Breakfast.it platform (for example, making a reservation or creating an advertisement), we may ask you to provide payment information (such as your bank account or credit card details) to facilitate the processing of payments.
• Communications with Bed-and-Breakfast.it and other members. When you communicate with Bed-and-Breakfast.it or use the Bed-and-Breakfast.it platform to communicate with other members, we collect information regarding your communications and any data you choose to provide.

1.1.2 Optional information that you may choose to provide

You can choose to provide us with additional personal data to improve your user experience on the Bed-and-Breakfast.it platform. This additional data will only be treated with your consent.

• Additional profile data. As part of your Bed-and-Breakfast.it profile, you can choose to provide us with additional information (such as gender, preferred language(s), address, city, and a personal description of yourself). As indicated in your account settings, some of this data will or may be used in the future as part of your public profile page and will be visible to others. This data, however, can be removed at any time from your user profile and you will always retain the right to decide personally whether to make this data public or not.
• Other information. You can also choose to provide us with other information by filling out a form, completing a search, updating, or adding information to your Bed-and-Breakfast.it account, by responding to surveys, posting forum content, participating in promotions, or using other features on the Bed-and-Breakfast.it platform.

1.1.3 Necessary information for the use of payment services

To comply with the applicable law (for example, anti-money regulations) and fulfil the contractual obligations adequately, the Data Controller needs to collect the following information, without which you cannot use the payment services:

• Payment information. When the payment services are used with respect to the payment processing, the Data Controller asks for some payment details (such as your bank account or credit card details, or your PayPal account email) to process payments and comply to the applicable law.
• Authentication and other information. If you are an operator of a tourist facility registered on our network, the Data Controller may request an identity check (such as photo ID, passport, or driving license, if permitted by applicable law) or other information that verifies your identity, such as date of birth, email address, telephone number, and other details to provide you with payment services and comply with applicable law.

1.2 Information collected automatically from the use of the Bed-and-Breakfast.it platform and payment services

When you use the Bed-and-Breakfast.it platform and payment services, information is automatically collected, including your personal data, regarding the services and methods used. This information is necessary for the proper execution of the contract between the site and the user and enables us to act in accordance with our legal obligations based on our legitimate interest, which is to improve and offer you the optimal functionality of the Bed-and-Breakfast.it platform and payment services.

• Location information. When certain features of the Bed-and-Breakfast.it platform are used, information about your precise or approximate location is collected, which is determined through information such as your IP address or the GPS of your mobile device, offering you a better user experience. Most mobile devices allow the user to control or disable the location option for applications in the device settings menu. Furthermore, if the device settings or permissions of the device allow it, Bed-and-Breakfast.it may collect this information even when you are not using the app.
• Usage information. We collect information regarding your interactions with the Bed-and-Breakfast.it platform, including, for example, the pages or other content you view, your ad searches, bookings made, and other tasks you have performed on the Bed-and-Breakfast.it platform. This information is used to improve your user experience, or to make the experience of searching for and booking a tourist facility on Bed-and-Breakfast.it as simple as possible.
• Login and device information. We automatically collect login data and information on devices when a user accesses and uses the Bed-and-Breakfast.it platform, even if the user has not yet created a Bed-and-Breakfast.it account or has not logged in.
• Cookies and similar technology. We use cookies and other similar technologies, including, for example, web beacons, pixels, and mobile device identifiers. We also may allow our business partners to use these tracking technologies on the Bed-and-Breakfast.it platform or involve third parties to monitor user behaviour on our behalf. You can disable the use of cookies by accessing the settings on your browser. The use of tracking pixels allows us to understand, for example, when clicking on an advertisement on a site outside the Bed-and-Breakfast.it platform is converted into a booking. In this way, we can study the most effective advertisements and consequently optimize our investments.
• Transaction information. Bed-and-Breakfast.it collects information relating to your transactions on the Bed-and-Breakfast.it platform, including the payment instruments used, the date and time, the amounts paid, the payment instrument expiration, the user’s billing address, the email address linked to the PayPal account, the IBAN, address, and other details relating to the transaction. This information allows for the proper execution of the contract between the site and the user and allows the latter to use and access the payment services on our site.

1.3 Information that we collect from Third-Parties.

Bed-and-Breakfast.it may collect data, including your personal data, which third parties provide about you when using the Bed-and-Breakfast.it platform and payment services, or obtain information from other sources and combine it with the information that we collect through the Bed-and-Breakfast.it platform and payment services. We do not control, supervise, or are responsible for the treatment of your personal data by such third parties, therefore any request for information regarding the disclosure of your personal information must be forwarded directly to the third parties.

• Third-party services. If you log in, connect, or access your Bed-and-Breakfast.it account through a third-party service (for example, Google or Facebook) this tool might send us information such as, for example, your registration data and your user profile associated with this service. The data sent to Bed-and-Breakfast.it varies and is controlled by the service itself, depending on the authorizations you have given to the services involved in relation to the privacy settings.
• References. The references written about you will be published on your public profile page on Bed-and-Breakfast.it with your consent.
• Other sources. we may receive additional information concerning you to the extent permitted by the applicable laws, including, for example, demographic data or fraud detection information, from service providers and/or third-party partners and combine them with the information in our possession. For example, we may receive the results of background checks (with your consent, when required) or fraud reports from industry service providers, such as identity verification companies, which is in line with our fraud prevention efforts and risk assessments. We may receive information about you and your activities on the Bed-and-Breakfast.it platform or outside of it, or about your experiences and interactions with our third-parties and networks, through these partnerships.

2. HOW THE DATA COLLECTED IS USED

Bed-and-Breakfast.it uses, stores, and processes your data, including personal data, to provide, understand, improve, and develop the Bed-and-Breakfast.it platform, creating and maintaining a reliable and secure environment and complying with its legal obligations.

2.1 Providing, improving, and developing the Bed-and-Breakfast.it platform.

• Allows you to access and use the Bed-and-Breakfast.it platform.
• Allows you to communicate with other platform members, both users who are operators and travellers.
• Provide customer assistance.
• Sending service or customer support messages, such as updates, security alerts, and account notifications.
• Manage, protect, improve, and optimize the Bed-and-Breakfast.it platform and the experience of our users, as well as personalize your experience (such as organizing search results or showing advertisements based on your research). To do this, for example, among other things, we create a profile based on your interactions with the Bed-and-Breakfast.it platform, the history of your bookings and searches, profile and preference data, and other content you send through the Bed-and-Breakfast.it platform.

We treat the data provided in accordance with our legitimate interests regarding the improvement of our Bed-and-Breakfast.it platform and the experiences of travellers and operators, and where necessary, to ensure the proper execution of the contract between the site and the user.

2.2 Create and maintain a more reliable and secure environment

• Detect and prevent fraud, spam, abuse, security breaches, and other harmful activities from occurring.
• Carry out safety investigations and risk assessments.
• Verify or authenticate the information or identification you provide (for example, verify the address of your facility or compare your identification photo with another photo that you have provided).
• Perform checks by cross-referencing databases and other sources of information, including legal background checks, to the extent permitted by applicable law and with your consent when required.
• Fulfil our legal obligations.
• Resolve any disputes with our members and assert our rights against third parties.
• Ensure the application of our Terms of Services and other policies.
• In connection with the activities described above, we may create a profile based on your interaction with the Bed-and-Breakfast.it platform and information obtained from third parties. In a few cases, automated processes may limit or suspend access to the Bed-and-Breakfast.it platform if they detect a potentially risky member or activity that threatens the security of the Bed-and-Breakfast.it platform, other members, or third parties.

We treat the information provided based on our legitimate interest in protecting our Bed-and-Breakfast.it platform, evaluating the proper execution of the contract between the site and the user, as well as complying with applicable laws.

2.3 Provide, personalize, evaluate, and improve our advertising and marketing

• Send promotional messages, marketing information, advertising, and other information that may be of interest to you based on your preferences (including information regarding the campaigns and services of Bed-and-Breakfast.it and its partners) and social media advertising through various social media platforms (for example, Facebook and Google).
• Personalize, evaluate, and improve our advertising.
• Manage referral programs, awards, surveys, prize competitions, or other promotional activities or events sponsored or managed by Bed-and-Breakfast.it or our partners.
• Create a profile based on your characteristics and preferences (based on the information you provide, your interactions with the Bed-and-Breakfast.it platform, the information obtained from third parties, and your booking and search history) to send you promotional messages, marketing, advertising, and other promotional material that we think may interest you.

We will treat your personal data for the reasons listed in this section based on our legitimate interest in marketing products or services to you that you might potentially be interested in. You can choose not to receive marketing communications from us by following the instructions to unsubscribe described inside the communications, or by changing the notification settings on your Bed-and-Breakfast.it account.

2.4 Methods of using the data collected by the Data Controller with respect to the processing of payments

• Allow access and use of the payment services.
• Detect and prevent fraud, abuse, security breaches, and other harmful activities from occurring.
• Carry out safety investigations and risk assessments.
• Perform checks, making cross-checks with databases and other sources of information.
• Fulfil our legal obligations (such as anti-money laundering regulations).
• Ensure the application of our Terms of Services and other payment policies.
• Upon your consent, send you promotional messages, marketing information, advertising, and other information that may be of interest to you based on your preferences.

The Data Controller of the payment processes treats the information collected in the legitimate interests regarding the improvement of the payment services and the experience of its users, as well as ensuring the proper execution of the contract with the user and complying with the applicable laws where necessary.

3. SHARING AND COMMUNICATING

3.1 With your consent.

We may share your data, including your personal data, with your consent, for example when you authorize an application or a third-party website to access your Bed-and-Breakfast.it account, or when you participate in promotional activities sponsored by Bed-and-Breakfast.it partners or third parties.

3.2 Sharing between members.

To help facilitate bookings or other interaction between members, we may need to share specific information, including personal data, with other members, to the extent necessary to ensure the proper execution of the contract between the site and the user, such as those illustrated in the scenarios below:

• When, as a traveller, you submit a booking request, some information about you is shared with the operator of the tourist facility, including your first and last name, the full name of additional guests, your cancellation history, and other information that you agree to share. When your booking is confirmed, we will share additional information, including your phone number, to assist you with organizing your trip.
• When, as the operator of a tourist facility, you have confirmed a booking, some of your data will be shared with the traveller to manage the booking, including, for example, your name and surname, telephone number, and the address of the facility.
• When, as a traveller, you invite other travellers to participate in a booking, your first and last name, travel dates, the operator of the tourist facility’s name, the details of the advertisement, the address of the facility, and other relevant information will be shared with each additional guest.
• When, as a traveller, you initiate a booking request with group payment, some information regarding the other participants, such as name, initials of the surname, profile picture, and booking details, are shared among all the participants of the request in question.

We do not share your billing and payment information with other members.

3.3 Profiles, advertisements, and other public information

The Bed-and-Breakfast.it platform allows you to publish information, including personal data, which is visible to the public. For example:

• Parts of your public profile page, including, for example, your name, profile description, and city are publicly visible to other users.
• The advertisement pages are visible to the public and include information such as the precise location of your tourist facility, the advertisement description, the calendar availability, your public profile photo, aggregate information on the application (for example, the number of page views in a given period), and any additional information that helps travellers decide whether to book the facility.
• After completing a booking, travellers and operators can write reviews and rate each other. Reviews and ratings are part of your public profile page and can be viewed on other parts of the Bed-and-Breakfast.it platform (such as the advertisement page).
• If you post content on a community or discussion forum, blog, or social media, or use a similar functionality on the Bed-and-Breakfast.it platform, such content will be publicly visible.

Based on our legitimate interests in promoting the Bed-and-Breakfast.it platform, we may make parts of it visible (for example, your advertisement page) on the websites of Bed-and-Breakfast.it partners, using technologies such as widgets or APIs. If your advertisements are shown on a partner’s site, it is possible that the data on the public page of your profile may also be visible.

The data that you publicly share on the Bed-and-Breakfast.it platform can be indexed by search engines not managed by Bed-and-Breakfast.it. In some cases, you can opt out of this feature through your account settings. If you change your settings or the content that is publicly accessible, these search engines cannot update their databases. We are not responsible for the practices of third-party search engines and these may use cache containing data that is not updated.

3.4 Additional services managed by the operators of tourist facilities.

Operators may need to use third-party services available through the Bed-and-Breakfast.it platform to assist them in managing the accommodation or to provide additional services requested to you, such as, for example, cleaning or access to the facility. The operators may use the features available on the Bed-and-Breakfast.it platform to share information about the guest (for example, check-in and check-out dates, the name and telephone number of the guest) with such third-party service providers to organize the stay, manage the accommodation, or provide other relevant services.

3.5 Compliance with the law, response to requests from public authorities, prevention, and protection of rights.

Bed-and-Breakfast.it may communicate your data, including personal data, to courts, public authorities, government authorities, or third parties authorized in the event and to the extent that we are required or authorized to do so by law or if such communication is reasonably necessary: (i) to comply with our legal duties; (ii) to comply with legal procedures and respond to claims made against Bed-and-Breakfast.it; (iii) to find verified requests relating to a criminal investigation or an alleged or allegedly illegal activity or any other activity likely to expose Bed-and-Breakfast.it, yourself, or any of our other users to legal liabilities; (iv) to manage and enforce our Terms of Service, Terms of Payment, or other agreements with members; (v) to protect the rights, property, or personal security of Bed-and-Breakfast.it, its employees, its members, or the public in general.

Where appropriate, we may inform members about such legal claims, unless: (i) providing such information is prohibited by the applicable legal procedure, based on an order received by the court or according to the law, or (ii) we believe that the notice is useless or ineffective, creates a risk of injury or physical harm to an individual or group of individuals, or creates or increases the risk of fraud against the property of Bed-and-Breakfast.it, its members, and the Bed-and-Breakfast.it platform. In cases where Bed-and-Breakfast.it complies with the legal requests for the communication of data without providing notice to the user for the reasons mentioned above, Bed-and-Breakfast.it will try to inform the user concerned about the request as soon as it determines in good faith that this is no longer prohibited.

3.6 Service providers.

Bed-and-Breakfast.it uses or may use in the future a variety of third party service providers to provide services related to the Bed-and-Breakfast.it platform and the payment services. The providers of these services may be located inside or outside the European Economic Area (“EEA”).

For example, service providers can help us to: (i) verify your identity or identity documents; (ii) verify information against public databases; (iii) conduct criminal background checks, fraud prevention, and risk assessments; (iv) provide technical assistance, maintenance, and product development services; (v) assist in the supply of Bed-and-Breakfast.it services; (v) assist in the supply of Bed-and-Breakfast.it services through third-party platforms and software (for example through the integration of our APIs), or (vi) provide customer, advertising, or payment support services. Such providers have limited access to the execution of the transactions on our behalf and are contractually bound to protect and use such data in accordance with the purposes for which they have received them and this Privacy Policy.

Bed-and-Breakfast.it will have to communicate your data, including your personal data, to guarantee the proper execution of the contract stipulated with you.

3.7 Social networking platforms.

We may use some of your personal information when permitted by applicable law, such as your email address, sharing it with social media platforms such as Facebook or Google, to generate leads and redirect traffic to our websites and promote products and services on the Bed-and-Breakfast.it platform. These treatment processes are based on our legitimate interests with respect to marketing and advertising products or services that may be of potential interest to you. Bed-and-Breakfast.it does not control or supervise social media platforms with which your personal data may be shared. For this reason, any questions regarding the way your personal information is treated by the social media provider must be addressed to the provider in question.

Remember that you may ask Bed-and-Breakfast.it to stop treating your data for marketing purposes at any time by sending an email to privacy@bed-and-breakfast.it.

3.8 Tax authorities.

In countries where Bed-and-Breakfast.it facilitates or requires registration, notification, permission, or licensing of a tourist facility operator with a local government authority through the Bed-and-Breakfast.it platform in compliance with local law, we may share information about the participating operators. This can include sharing information such as name, surname, contact details, address of the accommodation, tax identification codes, advertisement details, and number of nights booked with the relevant authority, both during this procedure, and if applicable, at various time intervals.

3.9 Business operations.

Should Bed-and-Breakfast.it undertake or be involved in any merger, acquisition, reorganization, transfer of business, bankruptcy, or insolvency proceedings, it may sell, transfer, or share some or all its assets, including your data, in reports or as a result of the transaction (for example, in the due diligence phase). In such cases, you will be informed before your personal data is transferred and becomes subject to a different privacy policy.

3.10 Aggregated data.

We also may share aggregated data (information about our users that we combine so that it does not identify or refer to single users) and other anonymous information for reasons of regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other commercial purposes.

4. OTHER IMPORTANT INFORMATION

4.1 Analysis of your communications

We many review, scan, or analyse your communications on the Bed-and-Breakfast.i