Guest Privacy Notice
This notice concerns the personal data of guests staying at Agua B'n'B. The processing of website users' data is covered by the website's Privacy Policy.
1. Data Controller
The Data Controller is:
- Agua Fria di Franceschelli Enrico & C. S.A.S.
- VAT number: 01737820538
- Email: aguafriasas@gmail.com
- Phone: +39 336 271 737
- Registered office: Via Garibaldi 15, 58100 Grosseto (GR), Italy
- CIR: 053011BBI0007
- CIN: IT053011B4C9WWG9DZW
2. Data processed
In connection with your stay, the following data of all guests, including minors, is processed:
- identification data (first name, surname, date and place of birth, nationality);
- identity document details (type, number, place of issue), required by law for identity verification;
- contact details (phone, email) and stay-related data (arrival and departure dates, assigned room);
- tax data needed to issue receipts or invoices, where requested.
3. Purposes and legal basis of the processing
| Purpose | Legal basis |
|---|---|
| Reporting guests' identification details to the public security authority (Questura) via the "Alloggiati Web" portal, pursuant to Article 109 of the Italian Consolidated Law on Public Security (TULPS, Royal Decree no. 773/1931). | Legal obligation (Art. 6(1)(c) GDPR). |
| Statistical reporting of tourist flows (ISTAT / Tuscany Region), carried out in aggregated and anonymous form. | Legal obligation (Art. 6(1)(c) GDPR). |
| Managing the booking and the stay (check-in, operational communications, payments). | Performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR). |
| Tax, accounting and administrative obligations, including the tourist tax where applicable. | Legal obligation (Art. 6(1)(c) GDPR). |
4. Nature of the provision of data
Providing your identification data and identity document is required by law: under Article 109 of the TULPS, accommodation providers may only host persons holding a valid identity document. Refusal to provide this data makes it impossible to provide accommodation. No consent is required for these purposes, as the processing is based on a legal obligation.
5. Recipients of the data
Personal data may be disclosed to:
- the competent Questura (police headquarters), via the Italian Ministry of the Interior's "Alloggiati Web" portal;
- the Tuscany Region and ISTAT, for mandatory statistical reporting (in aggregated form);
- the Municipality of Grosseto, for tourist tax obligations, where applicable;
- professionals and consultants (e.g. accountant) for tax and accounting obligations;
- competent authorities, where required by law.
The data is not subject to dissemination, is not used for marketing or profiling purposes, and is not transferred outside the European Union.
6. Data retention period
- guests' identification details are transmitted to the Questura within 24 hours of arrival (or upon arrival, for stays of less than 24 hours); the transmission receipts are kept for the time needed to prove compliance;
- tax and accounting documents are kept for 10 years, pursuant to Article 2220 of the Italian Civil Code;
- other stay-related data is kept for the time strictly necessary to manage the relationship and protect the Controller's rights.
7. Rights of the data subject
As a data subject, you have the right to exercise, within the limits and under the conditions set out in Articles 15-22 of the GDPR, the rights of access, rectification, erasure, restriction, portability and objection. Please note that erasure cannot be requested for data whose retention is required by a legal obligation (e.g. public security reporting, tax documents).
To exercise your rights, you can write to the Controller at aguafriasas@gmail.com.
8. Complaint to the supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the Member State where you habitually reside or work.