Skip to content
La MelaB&B

Privacy policy

How we handle the personal data of people who visit the website, write to us or stay with us (Art. 13 of EU Regulation 2016/679, “GDPR”).

Data controller

Manuela Musiani, who runs B&B La Mela, Via Grimaldi, 10, 25047 Darfo Boario Terme (BS) — tax code/VAT no. [to be added]. For any question about your data, write to lamelabeb@gmail.com.

What data we process and why

Browsing the website

The website is hosted by Cloudflare, whose servers automatically log some technical data about visits (IP address, browser type, requested page, date and time). It is used only to run the website and protect it from abuse; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The website uses no analytics, advertising or profiling tools: details about cookies are in the cookie policy.

Enquiries and bookings

When you contact us by phone, email or WhatsApp we process the data you give us (name, contact details, dates of stay, any requests) to reply and manage your booking. The legal basis is taking steps prior to, or performing, the accommodation contract (Art. 6(1)(b) GDPR).

Your stay

During your stay we process the data required by the legal obligations of accommodation providers, such as reporting guest details to the public security authority and tax and statistical obligations. The legal basis is legal obligation (Art. 6(1)(c) GDPR).

Do you have to provide your data?

No, but without contact details we cannot reply or confirm a booking, and without the data required by law we cannot host you.

Who may receive the data

  • Cloudflare, Inc., which hosts the website;
  • Google (Gmail), which runs our mailbox;
  • WhatsApp (Meta), if you choose to write to us there;
  • public authorities, when required by law;
  • advisers such as our accountant, for tax obligations.

Providers process data on our behalf or as independent controllers under their own privacy notices. Some are based in the United States: transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission. We never sell or pass on your data for marketing purposes.

How long we keep it

  • technical browsing data: for the short period set by Cloudflare;
  • enquiries that don’t lead to a booking: [retention period to be decided];
  • booking data and tax documents: for the periods required by law (10 years for accounting records).

Your rights

You can ask at any time to access, correct or erase your data, restrict its processing, receive it in a portable format or object to its processing (Arts. 15–22 GDPR), and withdraw any consent you have given. Just write to lamelabeb@gmail.com. If you believe your data is being handled improperly you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

External links

The website links to Instagram, Facebook, WhatsApp and Google Maps. These are plain links: any data those services collect when you open them is governed by their own privacy notices.

Last updated: 24 September 2026

CallWhatsAppDirections