PRIVACY POLICY

Last updated:** July, 2026

1. Data Controller

The Data Controller responsible for processing personal data is:

• Hotel Baia di Puolo
• Via Marina di Puolo, 10
• 80061 Massa Lubrense (NA) – Italy
• VAT Number:** 01243431218
• Telephone: +39 081 533 9799
• E-mail: info@baiadipuolo.com

2. Types of Data Collected

While browsing this website, the following personal data may be collected:

• identification data (name and surname);
• e-mail address;
• telephone number;
• booking request information;
• browsing data (IP address, browser, device, visited pages);
• any other information voluntarily provided through contact forms.

3. Purpose of Processing

Personal data are processed in order to:

• respond to enquiries submitted through the website;
• manage booking requests and reservations;
• comply with legal obligations;
• improve the functionality of the website;
• ensure website security;
• send communications where the user has given consent.

4. Legal Basis

The processing of personal data is based on Article 6 of Regulation (EU) 2016/679 (GDPR) and is carried out on the basis of:

• performance of a contract or pre-contractual measures;
• compliance with legal obligations;
• the data subject's consent, where required;
• the legitimate interest of the Data Controller.

5. Processing Methods

Personal data are processed using electronic and paper-based systems and appropriate security measures are adopted to prevent unauthorized access, disclosure, alteration or loss.

6. Data Retention

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected and, where required, for the periods established by applicable law.

7. Data Disclosure

Personal data may be shared with technical service providers, hosting companies, IT maintenance providers, consultants and public authorities where required by law.

Personal data will not be disclosed to the public.

8. International Data Transfers

Where services used by the website involve the transfer of personal data outside the European Economic Area, such transfers will take place in accordance with the GDPR and the safeguards provided by European legislation.

9. Data Subject Rights

Data subjects may exercise the rights provided by Articles 15–22 of the GDPR, including:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent at any time.

Requests may be sent to:

info@baiadipuolo.com

Data subjects also have the right to lodge a complaint with the competent Data Protection Authority.

COOKIE POLICY

This website uses technical cookies that are necessary for its proper operation. With the user's consent, analytical and third-party profiling cookies may also be used to improve the browsing experience and analyse website traffic. Users may change or withdraw their consent at any time through the cookie banner or by modifying their browser settings. For further information regarding the cookies used by this website, please contact the Data Controller using the contact details provided above.