Privacy Policy of the Tarchon Luxury B&B website

Data Controller, Data Processor, and Persons in Charge of Processing

The data controller for this website is

The updated list of data processors and persons in charge of processing can be requested directly from the data controller.

Purposes of Data Processing

Your personal data are processed for the following purposes:

• Manage and maintain the website and ensure its proper use;

• Manage stay reservations and the provision of requested hospitality services, including booking processes managed through the third-party platform integrated into the site;

• Fulfill pre-contractual, contractual, and fiscal obligations arising from ongoing accommodation relationships (e.g., issuing receipts, invoices, or tax documentation);

• Fulfill legal obligations, regulations, European community legislation, or orders from the Authority, with particular reference to the obligations of reporting guest data to public security authorities (Alloggiati Web Portal);

• Prevent or detect fraudulent activities or abuses harmful to the website or the accommodation facility;

• Send service communications related to your booking (e.g., confirmations, check-in details, useful info about the stay) and, subject to your explicit consent, commercial or promotional information about our services;

Soft Spam

If you are already a customer, you may receive commercial communications via email relating to services and products similar to those you have already used. You can request removal from this service at any time by contacting the Data Controller or by clicking the appropriate button within the emails.

Categories of Personal Data Processed

Regarding activities related to this website and booking management, the Data Controller processes the following categories of data:

• Personal and identification data: name, surname, date and place of birth, identification document details (the latter collected during the check-in or pre-check-in phase in compliance with public security obligations);

• Contact data: phone number and email address;

• Billing and payment data: name and surname and/or business name, full address, tax code, VAT number. Credit card or payment method data are entered and safely processed directly by the integrated third-party booking platform, which acts as an independent Data Controller or Data Processor;

• Stay details: arrival and departure dates, number of guests, special preferences or requests reported during the booking phase.

Recipients and Categories of Recipients to Whom Your Personal Data are Disclosed

Your personal data will not be disseminated to third parties, but may be communicated to specific categories of recipients for the fulfillment of legal or contractual obligations related to your stay. Your data will be shared with:

• Public Security Authorities (Questura): for the fulfillment of the legal obligation regarding the communication of guest details (pursuant to Art. 109 of the TULPS), via the online portal Alloggiati Web;

• Entities whose communication is mandatory by law: tax consultants, accountants, and social security or welfare institutions, for the management of administrative, accounting, and tax duties, as well as supervisory bodies and judicial authorities;

• IT and cloud management service providers: third parties providing software services for the management of the accommodation facility, including:

  • The online booking system provider (WuBook) integrated via iframe into the website, for receiving and managing bookings and related payment details;

• Web service and infrastructure providers: website hosting, database providers, and hardware and software maintenance services acting on our behalf and securely storing the data.

All third parties processing data on our behalf are appointed, where required by regulations, as Data Processors and are bound to respect the confidentiality and security of your data.

Methods of Processing

The processing of your personal data is carried out in compliance with current legislation. Your personal data may be processed both in paper and electronic form and will be treated fairly, transparently, and with maximum protection for your information.

• No profiling capable of uniquely identifying you is carried out;
• The website features the Google Analytics statistical tool, which is used to gather detailed data on how many people visit the website, which pages they view, etc. This tool has been configured so that your IP address is anonymized. Therefore, it is impossible to trace these statistics back to a specific person.

Rights of the Data Subjects

As a data subject, you have the rights referred to in Art. 7 of the Privacy Code and Art. 15 of the GDPR, precisely:

• Right of access. You have the right to obtain confirmation as to whether or not processing is taking place, access to data concerning you, and all information on the purposes, any recipients to whom your personal data are communicated, the source of the data (if not collected from the data subject), the duration of processing, and any consequences of processing based on profiling;
• Right to rectification: You have the right to request the rectification, integration, or modification of personal data concerning you;
• Right to erasure (Right to be forgotten): You can obtain the erasure of your personal data if they are not relevant or are inadequate relative to the purposes of the processing, if you withdraw consent, or if the data are processed unlawfully;
• Right to restriction of processing: You have the right to obtain the restriction of processing on your data, meaning that your personal data will be marked with the aim of limiting their further processing (except for strictly technical storage);
• Right to data portability: You have the right to obtain your data in electronic format and have them transferred to another data controller (for data processed by automated means and where technically feasible);

To exercise these rights, you may contact the Data Controller through the contact page.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated or your personal data have been used incorrectly.

Data Retention and Collection

Data are kept in electronic or paper format in the most appropriate and secure manners for a period of:

• Data mandatory by law (e.g., billing data) for a period defined by the mandatory statutory duration;
• Data such as email addresses, name and surname, telephone, fax, etc., until you request their deletion or unsubscribe from any services;

Provision of Data or Failure to Provide Data

The provision of data is mandatory regarding legal obligations and optional regarding the potential use of specific services. Refusal to provide mandatory data (such as billing data) prevents the fulfillment of duties related to the normal management of the working relationship, while refusal to provide data required for services prevents the provision of the services themselves.

Amendments to This Policy

This Policy may undergo variations and updates.

Website Terms of Use and Cookie Policy

Regarding the “cookie policy,” please refer to the specific information disclosures.