Privacy policy

Last updated: 23 September 2026

This notice explains how Ca' del Borgo processes the personal data of people who visit the website www.cadelborgocilento.it, ask for information or book a stay, under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 ("Privacy Code"). This is a translation for convenience: in case of discrepancy, the Italian version prevails.

1. Data controller

Ca'del Borgo B&B di Marquardt Francesco
Via Michele Agresti, 18 - 84061 Ogliastro Cilento (SA), Italy
VAT no. 06432640651
Email: [email protected] · Phone: +39 335 17 56 328

2. What data we process

Browsing data

Like any website, the systems that run it automatically collect some technical data, such as your IP address, browser type and the pages you visit. This data is used to keep the site working properly and securely, and is not used to identify you.

Data you give us

When you fill in the contact form, we process the data you enter: full name, email, phone, number of guests and message. The same applies when you email us, call us or contact us on WhatsApp.

Booking and stay data

Online bookings are made through the Beddy booking system, which processes the data needed to manage the booking on our behalf. During your stay, as required by law, we collect the details of the guests' identity documents and report them to the public security authority (Article 109 of the Italian Consolidated Law on Public Security).

Statistical data

Only if you give your consent through the cookie banner, we use Google Analytics 4 to collect aggregate statistics on how the site is used. Details are in the cookie policy.

3. Why we process data and on what legal basis

• To answer your requests for information: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• To manage your booking and stay: performance of a contract (Art. 6.1.b GDPR).
• To comply with legal obligations, such as tax, accounting and public security obligations (Art. 6.1.c GDPR).
• To keep the site secure and working: legitimate interest of the controller (Art. 6.1.f GDPR).
• Site usage statistics: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Providing the data needed to answer a request or manage a booking is necessary: without it, we couldn't do so. Consent to statistics is optional, and refusing it has no effect on your browsing.

4. How and for how long we keep data

Data is processed with electronic and paper tools, with appropriate measures to protect it.

• Requests for information: for the time needed to reply and, if no booking follows, no longer than 12 months.
• Booking data and tax documents: for 10 years, as required by Italian civil and tax law.
• Google Analytics statistical data: for a maximum of 14 months.

5. Who data may be shared with

Data is never published or sold. It may be processed, only for the purposes stated, by:

• suppliers that provide us with technical services, appointed as data processors: the website hosting provider, Beddy for online bookings and Google for Analytics and Maps;
• the accountant who handles our bookkeeping and tax obligations;
• public authorities, when required by law.

If you choose to contact us on WhatsApp, the communication is also handled by WhatsApp (Meta), under the terms and privacy notice of the service you use.

6. Transfers outside the European Union

Some suppliers, such as Google and Meta, may also process data in the United States. These transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, to which the suppliers adhere, or on the standard contractual clauses approved by the Commission.

7. Your rights

At any time you can ask us to:

• access your data and receive a copy;
• correct or update it;
• delete it, where no legal obligation requires us to keep it;
• restrict or object to its processing;
• receive it in a machine-readable format (portability);
• withdraw the consent you gave, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Changes to this notice

We may update this notice, for example if the services used by the site change. The date of the last update is shown at the top of the page.