Privacy policy
Last updated: 15 June 2026. Villa Grace Bed & Breakfast respects the privacy of its guests and website visitors. Here, in plain language, you will find what data we process, why, for how long, and what rights you can exercise. We only process the data needed to host you, answer your requests and comply with the law: no advertising, no profiling, no selling of your data.
Data controller
The data controller is Ilenia Monticelli, who runs the "Villa Grace" Bed & Breakfast (Italian tax code MNTLNI71S58G141S), Via Matrino 96, 65013 Città Sant'Angelo (PE), Italy — Marina di Città Sant'Angelo. For any request regarding your personal data, write to villagrace96@libero.it or call +39 338 724 6552. No Data Protection Officer (DPO) has been appointed, as it is not mandatory for this activity.
Enquiries, requests and direct bookings
When you contact us via the website form, email, phone or WhatsApp — including to request a quote — we process the data you provide (name, contact details, dates and number of guests, message content) solely to reply and handle your request or booking (Art. 6.1.b GDPR). The website form does not store data on a server: it opens a pre-filled WhatsApp message that you send yourself. This data is not shared with third parties or used for any other purpose.
Bookings via Booking.com
If you book through Booking.com, the data you enter on the portal is processed by it as an independent controller, under its own privacy policy. We only receive from the portal the data needed to manage your stay.
Payments
Payment for your stay is made in cash at the property, or through the portal you booked with. We do not process or store any credit or debit card data.
Guest registration and identity documents
As required by Article 109 of the Italian Consolidated Public Security Act (TULPS, Royal Decree 773/1931), on arrival we record each guest's identification data and report it to the Police Headquarters (Questura) through the "Alloggiati Web" portal (Art. 6.1.c GDPR — legal obligation). To do so we check an identity document, but we do not keep photocopies or scans: the data is only transmitted to the authority and is not stored by us.
Tourist tax and administrative obligations
For payment of the tourist tax to the Municipality and for the administrative and statistical obligations relating to your stay, we process only the necessary data (e.g. number of guests and nights), in compliance with legal obligations (Art. 6.1.c GDPR).
Video surveillance
The property has a video surveillance system covering the entrance and the car park, for the safety of people and the protection of property (legitimate interest, Art. 6.1.f GDPR). The processing is carried out in line with the Italian Garante's measure on video surveillance of 8 April 2010 and with EDPB Guidelines 3/2019 on processing personal data through video devices. The presence of cameras is signposted, before the recording range, with first-level short-notice signs (the "area under video surveillance" model); this is the extended notice. Footage is kept for a short period (24-48 hours) and then automatically deleted, unless it must be kept longer to comply with a specific request from the authorities. Footage is not disclosed and may only be shared with the competent authorities.
Guest Wi-Fi
We provide free Wi-Fi. We do not log guests' access or monitor their browsing.
Providers and recipients of data
For tax and accounting obligations we use our accountant, who processes the data as a processor on our behalf. The website is hosted on Aruba's servers (Aruba S.p.A., Italy), which may record technical logs (e.g. IP addresses) for security and operation, without using them to identify visitors. If you contact us via WhatsApp, the exchange of messages and the related data are processed by Meta Platforms Ireland Ltd. under its own policy, with a possible transfer of data outside the European Union on the basis of the Standard Contractual Clauses adopted by Meta. We do not share or sell your data; it may be disclosed to the authorities only where required by law.
Cookies and map on the website
The website uses only necessary technical cookies, which do not require consent, and does not use any analytics, marketing or profiling tools. The Google map loads only after you explicitly click it: until then, no data is sent to Google. Full details are in the Cookie Policy.
How long we keep your data
Enquiries and quotes: for as long as needed to reply to and handle the request. Stay data: for the duration of the stay and, for accounting and tax documents, up to 10 years as required by law. Data reported to the Questura (guest registration): not stored by us, only transmitted. Video surveillance footage: 24-48 hours.
Your rights
Under Regulation (EU) 2016/679 you have the right of access, rectification, erasure, restriction, portability and objection, and you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, https://www.garanteprivacy.it (opens in a new tab)). To exercise your rights, write to villagrace96@libero.it or to Villa Grace B&B, Via Matrino 96, 65013 Città Sant'Angelo (PE), Italy.
No newsletter or marketing
We do not send newsletters or promotional communications and we do not process your data for marketing or profiling purposes.
Changes to this policy
We may update this policy over time. The version in force is always the one published on this page, with the last-updated date shown above.