1. Data controller
The controller of the data collected through this site is:
PhotoGuest B&B Corso Gelone 7, 96100 Siracusa (SR), Italy P.IVA 02160790891 CIN: IT089017C14RY5T7SX — CIR: 19089017C120572 Email: info@photoguest-bb.com — Tel: +39 392 000 8687
2. Data collected, purposes and legal basis
This site is an informational showcase and processes minimal data:
Anonymous, aggregated browsing data, collected without cookies and without identifying individual visitors, solely for statistical purposes (basis: legitimate interest in improving the site, Art. 6.1.f GDPR).
Contact form data (name, email, message), processed only to respond to your enquiry (basis: response to a data subject's request and any pre-contractual measures, Art. 6.1.b–f GDPR). Providing this data is optional, but without it we cannot reply.
Technical and security cookies, detailed in section 3.
The site does not carry out marketing or profiling. Bookings and payments do not take place here: they are handled by the external services Beddy and Stripe, which are independent controllers for that phase. Tax and public-security obligations related to a potential stay concern the accommodation facility, not this site.
3. Cookies
The site uses only technical cookies and cookieless statistics. As there are no profiling or marketing cookies, no consent banner is displayed: technical cookies do not require one (Guidelines of the Italian Data Protection Authority).
Necessary / technical: the Beddy booking widget relies on Stripe for payment, which installs two anti-fraud technical cookies (__stripe_mid and __stripe_sid) to recognise the device and prevent fraud; also included here are any session cookies and the Cloudflare Turnstile anti-spam cookie on the contact form. No consent required.
Statistical: collected in anonymous, aggregated form, without cookies. No consent required.
Profiling / marketing: not used.
4. Recipients and transfers outside the EU
For the operation of the site, data may be processed, as processors, by Cloudflare, Inc. (hosting, distribution and site security, including Turnstile anti-spam) and by Brevo (sending emails generated by the contact form, a provider based in the European Union). If you choose to book, you will be directed to Beddy and Stripe, independent controllers for booking and payment: their own privacy policies apply to that data.
Some providers (in particular Cloudflare and, during payment, Stripe) may involve the transfer of data to the United States, on the basis of standard contractual clauses approved by the European Commission (Art. 46 GDPR) or the EU-US Data Privacy Framework.
5. Retention
Contact form data is retained for the time necessary to respond to the enquiry, and in any case no longer than 24 months, after which it is deleted. Visitor statistics, being anonymous and aggregated, do not constitute personal data. The ten-year retention of tax documents and booking data concerns the management of the facility and the booking system, not this site.
6. Your rights
You may exercise at any time the rights provided under Arts. 15–22 of the GDPR: access, rectification, erasure, restriction, portability and objection to processing. Simply write to info@photoguest-bb.com; we will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority: Garante per la Protezione dei Dati Personali (garanteprivacy.it).