Privacy notice

Last updated: 9 November 2026

In the event of any discrepancy, the Italian text prevails.

This notice explains how Ascione Francesco (“we”) processes the personal data of people who visit bnb80056ercolano.com, make a booking or contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Ascione Francesco
Email: 80056.ercolano@gmail.com
Phone: +39 347 184 4938

What data we process

• Browsing data: IP address, browser and device type, pages visited, date and time. It is collected automatically by the systems that run and protect the website.
• WhatsApp messages: your number, your profile name and what you write to us, including attachments.
• Emails and phone calls: your email address or number, and what you write or say to us.
• Booking data: the name and contact details of the person booking, the dates of the stay and the number of guests; on arrival, details of the guests' identity documents, as required by law.

In your messages, write only what is needed for your request: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each use we state the legal basis, that is, the point of Art. 6(1) GDPR that permits it.

• Replying to your requests and, if you ask, preparing a quote or an offer for you: pre-contractual measures taken at your request (point b).
• Managing the contract arising from the request: performance of the contract (point b).
• Managing the booking and the stay: performance of the contract (point b). Reporting guests' details to the police (Questura) under Art. 109 of the Italian Consolidated Law on Public Security (Testo unico delle leggi di pubblica sicurezza) and, where required, to the Region and the Municipality for statistics and the tourist tax: legal obligation (point c).
• Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (point f).
• Complying with legal obligations, for example tax and accounting requirements: legal obligation (point c).
• Protecting the website from abuse and automated programs: legitimate interest in security (point f).
• Asserting or defending a right: legitimate interest (point f).

Mandatory and optional data

Giving us your data is your choice; without the data we need, however, we cannot reply to you.

Booking data and guests' documents are necessary: without them we cannot confirm the booking or accommodate the guests.

When we ask for your consent, giving it is optional: if you say no, the website and the service work just the same.

How and for how long we keep the data

We process the data using IT tools and, when necessary, on paper. Only authorised persons can see it, and we protect it with appropriate security measures.

• Browsing data is kept by the provider hosting the website for as long as necessary for security, according to its own rules.
• Requests and messages that do not lead to a contract are kept for as long as necessary to reply and follow up the negotiation, and in any case for no more than 6 months from the last contact.
• If a contract arises from the request, we keep the data for its entire duration and, afterwards, for 10 years, as required by law for accounting and tax documents (Art. 2220 of the Italian Civil Code).
• Identity document details are needed for the mandatory report to the police (Questura): we keep them only for as long as the law requires.

Who receives the data

The data is neither sold nor disseminated. It may be received only by the following parties, each within the scope of its role:

• the persons authorised by Ascione Francesco, who are bound by confidentiality;
• OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the website: it processes the data on our behalf, solely for the technical management of the website;
• Cloudflare, Inc. (United States), which hosts and protects the website and provides the technical tools described on this page: it processes the data on behalf of OnlinePerTutti.com, as its supplier;
• WhatsApp Ireland Limited, if you write to us on WhatsApp: it processes the messages as an independent controller (WhatsApp's privacy policy);
• our accountant and other advisers, banks and public authorities, where required by law or by the contract.

Data outside the European Union

Some of the suppliers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (Arts. 44-46):

• for US companies participating in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795);
• in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which is not covered by a European Commission adequacy decision. The data is stored on the systems of the suppliers listed above: T.H.K. Consulting Limited accesses them only for the technical management of the website, on our behalf.

For information about these safeguards, or a copy of them, write to 80056.ercolano@gmail.com.

Your rights

At any time you may ask us:

• to see your data and obtain a copy of it (access, Art. 15 GDPR);
• to correct or complete it (rectification, Art. 16);
• to erase it, when it is no longer needed or the law does not oblige us to keep it (erasure, Art. 17);
• to restrict its use (restriction, Art. 18);
• to receive it in a machine-readable format, so that you can take it elsewhere (portability, Art. 20);
• to object to use based on our legitimate interest and, at any time, to use for promotional purposes (objection, Art. 21).

If you have given us your consent, you may withdraw it at any time: withdrawal does not affect what we have done before (Art. 7(3)).

To exercise your rights, write to 80056.ercolano@gmail.com. We will reply within one month. In more complex cases this period may be extended by a further two months: if so, we will tell you within the first month (Art. 12(3)).

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22).

Complaint to the Garante

If you believe your data is being processed in breach of the GDPR, you may lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it (Art. 77 GDPR).

Cookies

The cookie notice explains which cookies and similar tools the website uses and how you can manage them.

Changes to this notice

This notice may change, for example if the website adds a feature or a regulation changes. The version in force is always this page, with the date at the top.