Privacy and cookies

Data controller

Bed and Breakfast Villa Vesta di Mariangela D’Alò, Località Coppitella, 40, 71019 Vieste (FG) – P.IVA 04182800716 – bbvillavesta@gmail.com

What we collect

When you book: first and last name, email, phone number, dates of stay, number of guests, arrival time and any optional message you write to us.

Card details are entered directly on Stripe’s secure page, and if you choose PayPal you pay on PayPal’s page: they never pass through our systems.

Like any website, the server records some technical data about visits for security (IP address, page requested, date and time), kept for a short time (legitimate interest, Art. 6(1)(f) GDPR).

Why we use it

To manage your booking and stay (performance of a contract, Art. 6(1)(b) GDPR) and to meet tax and legal obligations (Art. 6(1)(c) GDPR). We do not use your data for marketing and do not share it with third parties, except as described below.

The box you tick when booking confirms that you have read this notice: it is not consent, because the data is needed for the booking you ask us for.

Who we share it with

Stripe Payments Europe Ltd. or PayPal (Europe) S.à r.l. et Cie, S.C.A., depending on how you pay; our email provider for emails; the provider of the server that hosts the website and the data. Each processes the data only for these purposes.

Where the law requires it: the police (Questura), through the State Police’s Alloggiati Web portal, and the data for mandatory tourism statistics (ISTAT), as explained under online check-in.

How long we keep it

For as long as needed to manage your stay and, for accounting records, for the period required by tax law.

Online check-in

Before arrival you can enter your party’s details from the link we send you: first and last name, sex, date and place of birth, citizenship and residence of each guest; for the person filling in, also the type, number and place of issue of their identity document and photos of it.

Online check-in is a service you ask us for to make your arrival quicker (Art. 6(1)(b) GDPR) and it is optional: you can show us your documents on arrival and do everything there. If you use it, we also need photos of the document, so that we can prepare everything beforehand; we still check documents in person on arrival.

We report the personal and document details to the police through the Alloggiati Web portal, as Italian law requires (Art. 109 of the Consolidated Public Security Act; Art. 6(1)(c) GDPR). Your residence is used for the mandatory statistics on tourist arrivals (ISTAT; Art. 6(1)(c) GDPR), which contain no names.

The data and photos are encrypted, only the B&B can see them, and they are deleted automatically 30 days after departure, or at once if the booking is cancelled.

Your rights

You can ask at any time for access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to bbvillavesta@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Cookies

This website uses no profiling cookies and no analytics. While you book, your browser temporarily keeps the form data (sessionStorage) so you don’t have to retype it if you go back; it is deleted when you close the tab. The guest guide only remembers the language you chose in your browser (localStorage), until you clear the site data.

The map is loaded from OpenStreetMap; payment takes place on Stripe’s or PayPal’s page, which use their own technical and anti-fraud cookies.