1. Data controller
The controller of the data collected on this site is [DA COMPLETARE: nome e cognome o ragione sociale del titolare], manager of B&B Magnolia, Strada Lungofino 57, 65013 Città Sant'Angelo (PE) — Tax/VAT number: [DA COMPLETARE: codice fiscale / partita IVA]. Email: info@bb-magnolia.com — Tel. +39 349 8858188.
2. Data processed
In line with the principles of lawfulness, fairness and data minimisation, we process:
- the data entered in the contact form: name, email address, check-in/check-out dates (if filled in) and the content of the message;
- browsing data recorded in the server logs (IP address, date and time of the request, requested resource, user agent), managed by the hosting provider;
- cookies, as described in the Cookie Policy.
3. Purposes and legal bases
- responding to requests for information, quotes and bookings — art. 6.1(b) GDPR (performance of pre-contractual measures taken at the data subject's request);
- in the event of a stay, related legal obligations (registration of guests, tax and accounting obligations) — art. 6.1(c) GDPR;
- site security and prevention of unauthorised access to the admin area — art. 6.1(f) GDPR (legitimate interest of the controller).
4. Nature of data provision
Providing your name and email address is necessary to answer the request; failing to provide them makes a reply impossible. The other fields (dates, message) are optional.
5. Methods of processing
Data is processed with electronic tools, with security measures adequate to ensure confidentiality and integrity. We do not carry out profiling nor take decisions based on automated processing.
6. Recipients of the data
The data may be processed by [DA COMPLETARE: provider di hosting e posta elettronica], acting as data processor under art. 28 GDPR, for hosting the site and email. The data is not disseminated.
7. External services
The fonts (Inter) and icons (Lucide) are hosted on our server: no requests are sent to Google or other CDNs. The OpenStreetMap map (served by the OpenStreetMap Foundation, United Kingdom) is loaded only after an explicit user request ("Show the map"); from that moment the OSMF privacy policy applies: osmfoundation.org/wiki/Privacy_Policy.
8. Data retention
Requests received via the contact form that do not lead to a stay are retained for up to 12 months from the last communication. In the event of a stay, the data is retained for the periods required by law (10 years for tax documentation). Security logs of access attempts to the admin area are retained for 5 minutes.
9. Rights of the data subject
At any time you may exercise the rights set out in arts. 15-22 GDPR (access, rectification, erasure, restriction of processing, portability, objection) by writing to info@bb-magnolia.com. Anyone who considers that the processing concerning them breaches the GDPR may lodge a complaint with the supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), under art. 77 GDPR.
10. Changes
This policy may be updated. Last update: 26 ottobre 2026.