Legal information
Transparency and protection
Your privacy is important. Here you'll find all the information on how we treat your data, use cookies and the conditions for using our site.
Privacy Policy Index
Last updated: 21 May 2026
This privacy notice describes how the personal data of users visiting the website genovabb.it (hereinafter "Website") is processed, operated by genovabnb.it S.r.l. This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Legislative Decree 196/2003 ("Privacy Code"), as amended by Legislative Decree 101/2018.
Art. 01Data Controller
The Data Controller is:
- Company name: genovabnb.it S.r.l.
- Registered office: Via di Sottoripa 1A/117, 16124 Genova (GE), Italia
- P.IVA / C.F.: IT02856660994
- Email:
- PEC:
The Data Controller has not appointed a Data Protection Officer (DPO) as the processing carried out does not fall within those requiring such appointment under Art. 37 of the GDPR..
Art. 02Categories of data collected
a) Navigation data
The computer systems and software procedures that operate the Website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (eg. IP addresses, browser type, operating system, domain name and addresses of websites from which access was made or exited, pages visited, time of request). These data are used solely to obtain anonymous statistical information about the use of the Website and to verify its correct operation.
b) Data voluntarily provided by the user
The optional, explicit and voluntary sending of messages via contact forms on the Website, newsletter subscription or filling out booking requests results in the collection of the sender's personal data, including:
- Name and surname
- Email address
- Phone number (if provided)
- Message content
- Stay dates and accommodation preferences (for booking requests)
c) Data collected via cookies
The Website uses technical cookies and, with user consent, third-party analytics cookies. For more information, please refer to the Cookie Policy.
Art. 03Purpose and legal basis for processing
| Purpose | Legal basis | Data processed |
|---|---|---|
| Website Operation Ensure navigation and security |
Legitimate interest of the Data Controller (article 6.1.f GDPR) | Navigation data, technical cookies |
| Response to requests Manage information requests, bookings, contacts |
Execution of pre-contractual measures (art. 6.1.b GDPR) | Name, email, phone, message, dates of stay |
| Newsletter Sending periodic communications ("Il Venerdì di Genova") |
Consent of the data subject (art. 6.1.a GDPR) | |
| Statistical analysis Service improvement through Google Analytics 4 |
Consent of the data subject (art. 6.1.a GDPR) | Anonymised navigation data |
| Legal obligations Fulfilment of tax, accounting and regulatory obligations |
Legal obligation (article 6.1.c GDPR) | Data necessary for fulfilment |
Art. 04Processing method
Personal data is processed using automated tools for the minimum time necessary to achieve the purposes for which it was collected. Specific security measures are adopted to prevent data loss, illegal or improper use and unauthorised access, including:
- HTTPS protocol with SSL/TLS certificate
- Data access limited to authorised personnel
- Regular backups and disaster recovery procedures
- Hosting on servers located in the European Union (provider: Netsons S.r.l., Italy)
Art. 05Communication and disclosure of data
Personal data may be shared with:
- Processors (art. 28 GDPR): technology service providers (hosting, email, analytics) acting on behalf of the Controller
- Octorate S.r.l.: booking management platform, for the purpose of fulfilling stay requests
- Brevo (Sendinblue): email marketing service with servers in the EU, for newsletter distribution
- Google LLC: Google Analytics 4, with prior user consent
- Competent authorities: when required by law
Personal data will never be disclosed to unauthorised third parties or sold.
Art. 06Data transfer abroad
Data processed via Google Analytics 4 may be transferred to the United States. This transfer occurs on the basis of the Standard Contractual Clauses (SCC) adopted by the European Commission and the EU-USA Data Privacy Framework. The Website hosting and newsletter service (Brevo) are located in the European Union.
Art. 07Retention period
| Data type | Retention period |
|---|---|
| Navigation data (logs) | 90 days |
| Contact form data | 24 months from collection |
| Booking data | 10 years (tax and accounting obligations) |
| Email newsletter | Until withdrawal of consent (unsubscribe) |
| Analytical cookies (GA4) | 14 months (GA4 configuration) |
Art. 08Rights of the data subject
Pursuant to articles 15-22 of the GDPR, the user has the right to:
- Access (art. 15) — obtain confirmation of the existence of processing and access your data
- Rectification (art. 16) — obtain correction of inaccurate data or completion of incomplete data
- Erasure (Art. 17) — obtain the erasure of data ("right to be forgotten")
- Restriction (art. 18) — obtain restriction of processing in certain cases
- Data portability (art. 20) — receive your data in a structured format and transfer it to another controller
- Objection (art. 21) — object to processing for legitimate reasons
- Withdrawal of consent (art. 7.3) — withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal
You can exercise your rights by writing to . We will respond within 30 days of receiving the request. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Art. 09Cookies and tracking technologies
The Website uses technical cookies necessary for operation and, with consent, Google Analytics 4 analytics cookies. For detailed information on types, purposes and cookie management, please refer to the Cookie Policy.
Art. 10Changes to this privacy statement
The Data Controller reserves the right to modify or update this policy at any time. Changes will be published on this page with the date of last update indicated. Users are invited to consult this page periodically.
