Privacy policy

Data controller

The controller is La Cognentse di Mappelli Angelo & C. S.a.s., Rue Grand Paradis 61/A, 11012 Cogne (AO), VAT no. 00556950079, which runs Hotel Le Bouquet.

For any question about your data, write to hotel.lebouquet@gmail.com or call +39 0165 749600.

What data we collect

• Direct booking on the website: first name, last name, email, phone, language, stay details (dates, number of adults and rooms, chosen rate) and any special requests written in the notes field. We also record your acceptance of the cancellation conditions, with date and time.
• Payment card: you enter it in a field run by Stripe. The hotel never sees or stores the full card number.
• Form on the Contact page: name, email and message, which reach us by email so that we can reply.
• Bookings made on Booking.com: we receive the booking data through our channel manager Zodomus. For the data it processes, Booking.com is an independent controller with its own privacy policy.
• Anonymous search statistics: when you search for availability we record the dates searched, the number of guests and rooms, the outcome of the search and the language. We do not record your IP address and use no cookies or other identifiers: the data cannot be traced back to you.

In the notes field, please write only what we need to prepare your stay (for example a food allergy). This information is used for that purpose only.

The website does not collect marketing consent, does not send newsletters and does no profiling.

Data collected at the hotel on arrival

At check-in the law requires us to ask for an identity document. The data is sent to the Police (Questura) through the Alloggiati Web service (art. 109 TULPS), statistical data is sent to the regional tourism observatory and to ISTAT, and the necessary data is used for the city tax of the Comune di Cogne.

The card as a guarantee

The card is saved at Stripe only as a guarantee: we ask for no deposit or prepayment, and the stay is paid at the hotel.

The card can be charged only in the cases set out in the cancellation conditions of the chosen rate, or in the event of a no-show.

Once the booking is closed (cancelled, no-show handled or stay completed) the card is released from the booking and the saved reference is deleted.

Why we use the data and on what legal basis

• Performance of a contract or pre-contractual steps (art. 6.1.b GDPR): handling the booking, sending you the confirmation, the pre-arrival emails and those about changes, replying to contact form messages.
• Legal obligation (art. 6.1.c GDPR): reports to the Police, tourism statistics, city tax, tax and accounting duties.
• Legitimate interest (art. 6.1.f GDPR): website security, card fraud prevention, defending our rights (for example in case of a no-show charge) and the anonymous search statistics.

Providing the data requested for the booking is necessary: without it we cannot make the booking.

Who we share the data with

We use service providers that process data on our behalf, as processors:

• Vercel Inc. (website hosting, United States);
• Supabase (database, servers in London, United Kingdom);
• Stripe (handling of the card guarantee);
• Resend (sending service emails, United States);
• Zodomus (channel manager connecting the hotel to Booking.com);
• Google (the hotel's mailbox is on Gmail; Google Maps on the Contact page, only if you choose to load the map).

Data may also be shared with the hotel's accountant and advisers, and with the authorities when the law requires it.

Transfers outside the European Union

Some providers are based, or have servers, outside the European Union and the European Economic Area. In those cases the transfer relies on an adequacy decision of the European Commission (United Kingdom; EU-US Data Privacy Framework for certified US companies) or on Standard Contractual Clauses approved by the Commission.

How long we keep the data

• Booking and accounting data: 10 years, as required by art. 2220 of the Italian Civil Code.
• Card guarantee reference: deleted when the booking is closed.
• Contact form messages: as long as needed to reply, and no longer than 24 months.
• Data sent to the Police: as provided by law; the hotel keeps no copies beyond what is required.

Your rights

Under arts. 15-22 GDPR you can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest.

To exercise these rights, write to hotel.lebouquet@gmail.com.

If you believe your data is not being handled correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookies

The website uses only technical cookies and tools. Details are in the Cookie policy.