Privacy Policy

How we process the personal data of people who visit dimorasavoianapoli.it, contact us or stay at Dimora Savoia, in accordance with Article 13 of Regulation (EU) 2016/679 (the “GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).

1. Data controller

The data controller is the operator of the Dimora Savoia bed & breakfast:

Controller

[to be completed]

VAT number

[to be completed]

Address

Corso Amedeo di Savoia 197, 80136 Napoli, Italy

Email

info@dimorasavoianapoli.it

Phone and WhatsApp

+39 338 959 7078

Certified email (PEC)

[to be completed]

If you have any questions about this policy or your data, please write to info@dimorasavoianapoli.it.

2. What data we process, why and on what basis

Browsing the website

This is a static website: there are no user accounts and no contact forms. When you visit its pages, the server hosting the site receives some technical data needed to deliver the content (IP address, date and time, page requested, browser and device type), which may be recorded in system logs. We use this data only to keep the site running and to protect it from abuse and cyber attacks.

The availability calendar queries an internal service of ours that reads free rooms and rates from Beds24: it does not ask for any personal data, only the dates and number of guests you choose. If you then decide to contact us, the calendar prepares a WhatsApp message with these details, which you can edit and which is sent only when you send it yourself.

Legal basis: our legitimate interest in ensuring that the website works properly and securely (Art. 6(1)(f) GDPR).

Enquiries and direct bookings

If you message us on WhatsApp, call us or send us an email, we process the data you give us (name, phone number or email address, dates of stay, number of guests, any special requests) in order to reply and, if you decide to book, to manage your booking and stay.

The WhatsApp buttons on the site open the app through a wa.me link with a pre-written message, which you can edit before sending. Messages travel through the WhatsApp platform (WhatsApp Ireland Ltd., part of the Meta group), which also processes them under its own terms andprivacy policy.

Legal basis: steps taken at your request prior to entering into a contract, and performance of the accommodation contract (Art. 6(1)(b) GDPR).

Online bookings

The online booking button opens our property's booking page on beds24.com in a new tab. The data you enter (name, contact details, dates, number of guests, requests and, where required, payment details) is collected by Beds24.com GmbH (Germany), the service we use as our channel manager and booking engine, which processes it on our behalf as data processor.

When online payment is active, card details are processed by Stripe (Stripe Payments Europe Ltd., Ireland), which processes them on our behalf and, for certain purposes of its own such as fraud prevention and legal obligations, as an independent controller.

Legal basis: performance of the contract and of pre-contractual steps (Art. 6(1)(b) GDPR).

Bookings through online travel agencies

If you book on Booking.com, Expedia or other platforms, the data collected there is processed by those platforms as independent controllers, under their own privacy policies. We receive, including through Beds24, only the data needed to manage your booking and stay, and we process it as described on this page.

Legal obligations related to your stay

On arrival we are required by law to collect the details of all guests (first name and surname, sex, date and place of birth, nationality, identity document details) and to:

• report the guests' details to the local police headquarters (Questura) through the State Police's Alloggiati Web portal (Article 109 of the Consolidated Law on Public Security – TULPS, Royal Decree 773/1931);
• submit the data required for official tourism statistics (ISTAT and the Campania Region);
• apply the City of Naples tourist tax and file the related returns;
• comply with tax and accounting obligations (receipts, invoices, registers).

Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

Statistics and marketing (only with your consent)

Only if you accept them in the cookie banner, we use:

• Google Analytics 4, possibly through Google Tag Manager (Google Ireland Ltd.), to understand in aggregate form how the site is used: pages visited, where visits come from, device type;
• Google Ads (Google Ireland Ltd.), Meta Pixel (Meta Platforms Ireland Ltd.) andTikTok Pixel (TikTok Technology Ltd., Ireland), to measure the results of our advertising campaigns and show you our ads on other websites, apps and social networks (remarketing).

Legal basis: consent (Art. 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), which you may refuse or withdraw at any time without affecting your use of the site. Details of each tool, its cookies and their duration are set out in the Cookie Policy.

We also use Google Search Console, which gives us aggregated data on how the site appears in Google search results: it does not place cookies on your device and does not allow us to identify visitors.

Google Maps

On the Location page, the interactive Google Maps map (Google Ireland Ltd.) is loaded only after you give your consent, either in the cookie banner or with the “Load the map” button. When the map loads, your browser connects to Google's servers, which receive your IP address and may set their own cookies.

Legal basis: consent (Art. 6(1)(a) GDPR).

3. Providing your data

Providing your contact and booking details is necessary for us to reply and manage your stay: without them we cannot follow up on your request. The data required by law on arrival is mandatory, and without it we cannot accommodate you. Consent to statistics, marketing and external content is optional.

4. How we process your data

We process data electronically and, where necessary, on paper, using appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse. Access is limited to the people who run the property and to authorised, trained staff. We do not take decisions based solely on automated processing that produce legal effects or similarly significant effects on you (Art. 22 GDPR).

5. Who may receive your data

We do not sell your data. It may be shared, solely for the purposes described above, with:

6. Transfers outside the European Union

Google, Meta (including WhatsApp), TikTok and Stripe belong to groups with offices and servers outside the European Union as well, particularly in the United States, where data may be transferred. Such transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework, for certified companies (such as Google, Meta and Stripe), or on the standard contractual clauses approved by the Commission (Art. 46 GDPR). TikTok may also process data in other third countries, on the basis of standard contractual clauses.

7. How long we keep your data

At the end of these periods, data is deleted or anonymised.

8. Your rights

At any time you may request (Articles 15-22 GDPR):

• access to your data and a copy of it;
• rectification of inaccurate data or completion of incomplete data;
• erasure, except for data we are required by law to keep;
• restriction of processing;
• portability of the data you have provided, in a structured, commonly used and machine-readable format;
• to object to processing based on legitimate interest, on grounds relating to your particular situation.

Where you have given consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal. For cookies, simply use the “Cookie preferences” link at the bottom of every page or the button in the Cookie Policy.

To exercise your rights, write to info@dimorasavoianapoli.it. We will reply without undue delay and in any event within one month of your request, a period that may be extended in the cases provided for by Art. 12 GDPR.

If you believe that the processing of your data infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali,www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work, or bring proceedings before the courts.

9. Changes to this policy

We may update this policy, for example if the services we use change. The current version is always published on this page, together with the date of the last update.

Last updated: 10 October 2026