Privacy Policy
1. Data Controller
This Privacy Policy explains how personal data is collected, used, stored and protected when users visit the Baglioni Art Suite website, request information or make a direct booking.
The data controller is:
Baglioni Art Suite di Yesenia Brigitte Arangoytia Coronado
Via Baglioni 10 06121 Perugia (PG), Italy
VAT No.: 04043020546
Email: info@baglioniartsuite.com
The data controller determines the purposes and methods of processing personal data in accordance with applicable data-protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
2. Personal Data We Collect
Depending on how users interact with Baglioni Art Suite, the following categories of personal data may be collected:
• Identification data, such as first name, last name, date and place of birth, nationality and identification-document details where required for guest registration.
• Contact data, such as email address, telephone number, postal address and country of residence.
• Booking and stay information, such as arrival and departure dates, selected accommodation, number of guests, special requests, expected arrival time and booking history.
• Payment and transaction information, such as the amount paid, payment status and transaction reference. Complete payment-card details are processed by the payment-service provider and are not directly stored by Baglioni Art Suite.
• Communication data contained in emails, contact requests, telephone conversations or other correspondence with Baglioni Art Suite.
• Technical and usage data, such as IP address, browser type, device information, pages visited, date and time of access and other information collected through essential website technologies.
Personal data may be provided directly by the user, generated when the website or booking engine is used, or received from booking and payment service providers involved in processing the reservation.
3. Purposes and Legal Bases of Processing
Personal data may be processed for the following purposes and on the following legal bases:
• To respond to enquiries and provide requested information. The legal basis is taking steps at the user’s request before entering into a contract and, where applicable, the legitimate interest in managing communications.
• To manage bookings, payments, check-in, accommodation services, guest communications and requests connected with the stay. The legal basis is the performance of a contract or taking steps before entering into a contract.
• To fulfil legal, administrative, accounting, tax, public-security and guest-registration obligations. The legal basis is compliance with legal obligations applicable to the data controller.
• To prevent fraud, protect the website, booking systems, accommodation, guests and legal rights, and to establish, exercise or defend legal claims. The legal basis is the legitimate interest of Baglioni Art Suite, provided that such interests do not override the rights and freedoms of the data subject.
• To operate, secure and improve the technical performance of the website and booking process. The legal basis is the legitimate interest in maintaining a secure and functional online service.
• To send promotional communications only where the user has provided valid consent or where another lawful basis applies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
Where providing personal data is necessary to complete a booking or comply with a legal obligation, failure to provide the required information may make it impossible to process the booking or provide the accommodation service.
4. Recipients and Service Providers
Personal data may be shared, only where necessary for the purposes described in this Privacy Policy, with:
• booking-management providers, including Smoobu, to process reservations and communications relating to a stay;
• payment-service providers and financial institutions to process payments and refunds;
• providers of website hosting, email and other technical services used to operate the website and manage guest communications;
• accountants, professional advisers and other authorised service providers where their assistance is required;
• public authorities, including those responsible for guest registration, where disclosure is required by law.
These recipients process personal data according to their respective roles and applicable data-protection obligations. Baglioni Art Suite does not sell guests’ personal data.
5. International Data Transfers
Baglioni Art Suite uses Framer for its website, Smoobu to manage bookings and Stripe for online payments. When these services are provided, some personal data may also be processed or accessed outside the European Economic Area (EEA).
Where data is transferred to a third country, the service provider applies a transfer mechanism recognised by data-protection law, such as an adequacy decision of the European Commission or, where necessary, the Standard Contractual Clauses approved by the European Commission.
For information about transfers of their personal data and the applicable safeguards, individuals may contact info@baglioniartsuite.com.
6. Data Retention
Baglioni Art Suite keeps personal data only for as long as necessary for the purpose for which it was collected.
Enquiries and related correspondence are kept for the time needed to respond and manage any follow-up. Booking, stay and payment records are kept for the time needed to provide the accommodation service and comply with applicable accounting, tax and other legal obligations. Technical data is kept for the time needed to operate and protect the website.
When the applicable retention period ends, personal data is deleted or anonymised, unless it must be kept longer to comply with a legal obligation or to establish, exercise or defend a legal claim.
7. Cookies and similar technologies
The website is built with Framer. Its integrated Framer Analytics service measures website usage without using cookies or persistent identifiers.
The website contains links to external services, including Google Maps. These services open when you select the corresponding link; their use is subject to the respective providers’ privacy notices and cookie settings.
You can manage or delete cookies through your browser settings.
8. Your Data Protection Rights
Under the GDPR, you may ask Baglioni Art Suite for access to your personal data, correction of inaccurate data, deletion of data, or restriction of its processing. Where the legal requirements are met, you may also request data portability or object to processing based on legitimate interests.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before it.
To exercise your rights, contact Baglioni Art Suite at info@baglioniartsuite.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (*Garante per la protezione dei dati personali).
9. Changes to This Privacy Policy
Baglioni Art Suite may update this Privacy Policy when its data-processing practices or applicable requirements change. The updated version will be made available on this page, with its date of last update.
For questions about this Privacy Policy or the processing of personal data, please contact info@baglioniartsuite.com.