1. Data Controller

The data controller of personal data is AlmaryDream B&Bcontactable at the email address: info@almarydream.it. info@almarydream.it.

2. Types of data collected

We collect the following data:

• Personal data (first name, last name)

• Contact information (email, phone number)

• Booking details (dates, preferences, requests)

• Payment information (managed by Stripe)

• Data collected via cookies (see Cookie Policy)

3. Purpose of data processing

I dati vengono trattati per:

• Manage bookings and requests through the HBook form

• Contact the customer via WhatsApp or phone

• Finalize payments through Stripe

• Respond to inquiries via the Elementor form

• Send promotional communications (with prior consent)

• Analyze traffic using marketing tools (Google Ads, Facebook Ads)

4. Legal basis for data processing

The processing is lawful because:

• It is necessary for the execution of the accommodation contract

• It is based on the user’s consent (for marketing and cookies)

• It is necessary to comply with legal and fiscal obligations

5. Modalità di trattamento e conservazione

Data are processed using electronic tools, lawfully and transparently. They are stored for:
Vengono conservati per:

• massimo 24 mesi per finalità di marketing

• up to 10 years for accounting and tax obligations

• until withdrawal for data collected on a consent basis

6. Recipients of the Data

The data may be shared with:

• Stripe (for payment processing)

• Authorized professionals (e.g., accountant)

• Digital service providers (hosting, web agency, marketing tools)

All third parties act in compliance with current regulations.

7. Data Subject’s Rights

Pursuant to EU Regulation 2016/679 (GDPR), the data subject has the right to request:

• Rectification or deletion

• rettifica o cancellazione

• Restriction or objection to processing

• Data portability

• Withdrawal of consent

Requests should be sent to: info@almarydream.it

8. Data Transfer Outside the EU

Data may be transferred outside the European Union, particularly to the United States, through services such as Stripe, Meta (Facebook), and Google. In these cases, the processing will comply with the standard contractual clauses approved by the European Commission.

9. Changes to this Privacy Policy

We reserve the right to update this privacy policy. Any changes will be posted on this page.