Skip to content
it·en·de
Privacy Policy

Privacy Policy

Last updated: 29 June 2026

This policy explains how Madam Upstairs processes the personal data of users who visit this site or contact us, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Data controller

The data controller is B&B di Manuela Scudeler (“Madam Upstairs”), based at Via Risorgimento 12, 31100 Treviso (TV), Italy — VAT and tax code 04780830263.

For any request about your personal data you can write to info@babtreviso.com or call +39 393 33 88 333.

The controller has not appointed a Data Protection Officer (DPO), as it is not required to.

What data we collect

We only process the data needed to reply to you and manage any stay:

  • Navigation data: IP address, browser and device type, pages visited and access times, collected automatically by the systems running the site.
  • Request form data: first and last name, email, phone, arrival and departure dates, number of guests, language and the message content.
  • Direct contact data: what you provide when you write to us by email or WhatsApp or call us.
  • Cookies and similar tools: see the Cookie Policy for details.

Why we process data and on what legal basis

Purposes and related legal bases:

  • Replying to information and availability requests and carrying out the pre-contractual steps you request (Art. 6.1.b GDPR).
  • Managing the booking and the stay and meeting legal obligations, including reporting guests’ details to the public security authority and tax and accounting obligations (Art. 6.1.b and 6.1.c GDPR).
  • Ensuring the security and proper functioning of the site (Art. 6.1.f GDPR, legitimate interest).
  • Statistics and marketing via cookies, only with your prior consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Providing data

Providing navigation data is necessary for the site to work. Providing form data is optional, but without the fields marked as required (name and email) we cannot follow up on your request.

Who we share data with

Data is processed by the controller’s authorised staff and may be shared with parties acting as processors or independent controllers, including:

  • the site’s hosting and infrastructure provider (Vercel Inc.);
  • the provider that sends the request emails (Resend, Inc.);
  • Google Ireland Ltd. / Google LLC for statistics, maps and advertising services, where enabled with your consent;
  • Meta Platforms Ireland Ltd. for advertising tools, where enabled with your consent;
  • tax, accounting, legal and IT consultants and providers;
  • public authorities, where required by law (e.g. public security authority, Italian Revenue Agency).

Transfers outside the European Union

Some providers (in particular Vercel, Resend, Google and Meta) may also process data in the United States. In that case the transfer relies on adequate safeguards under Articles 44 ff. of the GDPR, such as the European Commission’s Standard Contractual Clauses and/or membership of the EU-US Data Privacy Framework. You can ask us for a copy of the safeguards in place.

How long we keep data

We keep data only as long as necessary for the stated purposes:

  • requests that do not lead to a stay: for the time needed to handle them and in any case no longer than 24 months;
  • data related to the stay: for 10 years from the end of the relationship, for tax and legal obligations;
  • navigation data and technical logs: for a limited period, for security purposes;
  • data processed on the basis of consent: until consent is withdrawn.

Your rights

At any time you can exercise the rights under Articles 15-22 of the GDPR:

  • access, rectification, erasure and restriction of processing;
  • objection to processing and data portability;
  • withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal.

How to exercise your rights and complaints

To exercise your rights, write to info@babtreviso.com: we will reply without undue delay.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — https://www.garanteprivacy.it) or apply to the courts.

Minors

The site and our services are not aimed at children under 14; we do not knowingly collect their data without the consent of those with parental responsibility.

Changes to this policy

We may update this policy over time. The version published on this page, with its date, is the one in force.

→ Cookie Policy