In accordance with EU Regulation 2016/679 (GDPR), this document describes the processing of personal data of users who visit and use the website of the accommodation facilities managed by AUDACIA S.R.L.

1. Data controller
AUDACIA S.R.L.
Trading name: AB Group S.r.l. Address: Via Valeggio, 28, Milan, 20143 The company is registered at the Milan Chamber of Commerce. The company's VAT number is: 04004981207
Via Emilia Ponente 22, 40133 Bologna
Email: prenotazioni@bmaffittibrevi.it
Telephone: +39 3913315279

2. Type of data collected
The following personal data may be collected through the site:

• Identification and contact details (name, surname, email, telephone number) voluntarily provided via the contact form;
• Navigation data collected in an anonymous and aggregate form (e.g. IP addresses, site usage data, technical and analytical cookies);
• Data transmitted to third parties if the user uses external links to online booking platforms (e.g. Booking.com, Airbnb, etc.).

3. Purpose of processing
The data collected are processed for the following purposes:

• Responding to enquiries received via the contact form;
• Providing support for bookings or facility-related requests;
• Improving the user experience and monitoring the proper functioning of the site;
• Fulfil any legal obligations.

4. Methods of processing
The data is processed in a lawful, correct and transparent manner, mainly using IT and telematic means, taking appropriate technical and organisational measures to ensure its security.

5. Legal basis of processing
The treatment is based:

• on the user's consent, expressed through voluntary submission of the contact form;
• on the fulfilment of legal or contractual obligations possibly related to the requests received.

6. Data recipients
The data may be processed exclusively by the owner and authorised parties, or by external providers (e.g. hosting services, CMS platforms such as WordPress) for purposes strictly related to the management of the site. The data will not be disclosed or transferred to third parties for commercial purposes.

7. Transfer to third countries
Data is not transferred outside the European Economic Area, except in cases where the user interacts with external booking platforms that also operate outside the EU (e.g. Airbnb, Booking). In such cases, please refer to the respective privacy policies.

8. Data retention
Data provided via contact forms will only be stored for as long as necessary to respond to the user's request and, in the case of contractual relations, to fulfil legal obligations.

9. Rights of the data subject
The user has the right to:

• access their data;
• request their rectification or cancellation;
• restrict or oppose processing;
• lodge a complaint with the Data Protection Authority.

To exercise these rights, the user may contact the Controller at the above-mentioned email address.

10. Cookies
The site may use technical and analytical cookies. For more details, please consult the special Cookie Policy.