PRIVACY AND COOKIE POLICY
Last updated: 23 August 2026
This Privacy and Cookie Policy describes how Le Ninfee – Tourist Apartment processes the personal data of users who visit leninfee.it, request information or make a booking, as well as the use of cookies and similar technologies.
1. DATA CONTROLLER
The Data Controller responsible for the processing of personal data is:
Isabella Bizzini
Le Ninfee – Tourist Apartment
Via delle Officine 1
40069 Zola Predosa (BO), Italy
Email: [email protected]
For any enquiries regarding privacy or the exercise of your rights, you may contact the Data Controller at the email address above.
2. PERSONAL DATA PROCESSED
Depending on how the website and the services offered are used, the following personal data may be processed:
• first and last name;
• email address and telephone number;
• booking and stay details;
• number and details of guests;
• communications and requests submitted by the user;
• data required for invoicing, receipts and administrative purposes;
• data required to comply with the regulations applicable to tourist accommodation and short-term tourist rentals;
• technical browsing data, such as IP address, browser type, device and technical information generated by the operation of the website;
• payment-related information processed through payment service providers.
Where required by applicable law, data necessary for the identification and registration of guests may also be collected.
3. PURPOSES AND LEGAL BASES FOR PROCESSING
Personal data may be processed for the following purposes.
Managing enquiries and communications
To respond to enquiries submitted through the website, by email or through other contact channels. Processing is necessary in order to respond to the data subject's request.
Managing bookings and stays
To check availability and manage bookings, amendments, cancellations, payments, check-in, check-out and other services related to the stay. Processing is necessary for the performance of a contract or to take pre-contractual steps at the request of the data subject.
Compliance with legal obligations
To comply with administrative, tax, accounting, public security and other obligations required by applicable law.
Protection of rights
Where necessary, personal data may be processed to establish, exercise or defend the Data Controller's legal rights.
Website operation and security
Certain technical data is processed to ensure the proper operation, security and availability of the website and its related services.
4. BOOKINGS THROUGH EXTERNAL PLATFORMS
Le Ninfee may also receive bookings through external platforms and channels such as Booking.com, Airbnb and Vrbo.
When a user makes a booking through one of these services, the relevant platform processes personal data in accordance with its own privacy policy and may provide Le Ninfee with the data necessary to manage the booking and the guest's stay.
For detailed information on how these platforms process personal data, users are advised to consult their respective privacy policies.
5. SERVICE PROVIDERS AND SERVICES USED
For the management of the website, bookings and guest stays, Le Ninfee may use specialised service providers that process personal data to the extent necessary to provide their respective services.
Lodgify
Platform used for the website, booking system and booking management.
Vikey
Service used for procedures relating to check-in, guest identification and registration, and other requirements associated with the stay.
Stripe
Service used to process electronic payments.
Booking.com, Airbnb and Vrbo
Platforms through which bookings may be received and managed.
Technical services may also be used for rate management and the online distribution of the accommodation offering, to the extent necessary for the management of the property and its bookings.
Depending on the services provided, these providers may act either as data processors on behalf of the Data Controller or as independent data controllers.
6. PAYMENTS
Electronic payments may be processed through specialised providers, including Stripe.
Le Ninfee does not need to directly obtain all payment instrument details used by the guest when such information is processed directly by the relevant payment service provider.
Users are also advised to consult the privacy policy of the payment service provider used.
7. DATA RETENTION
Personal data is retained for as long as necessary for the purposes for which it was collected and, subsequently, for the period required by applicable law or necessary to protect the Data Controller's rights.
Data relating to bookings, payments and administrative and tax obligations may therefore be retained for the periods required by law.
Requests for information that do not result in a booking are retained only for the period reasonably necessary to handle the request, unless further legal obligations or legitimate retention requirements apply.
8. DISCLOSURE AND TRANSFER OF DATA
Where necessary, personal data may be disclosed to:
• IT and management service providers;
• booking platforms;
• payment service providers;
• check-in and guest management service providers;
• consultants and professional advisers;
• public authorities and other parties to whom disclosure is required by law.
Some service providers may process personal data outside the European Economic Area. Where applicable, such transfers are carried out using the mechanisms and safeguards provided for under applicable data protection legislation.
9. DATA SUBJECT RIGHTS
In the circumstances provided for by Regulation (EU) 2016/679 (GDPR), data subjects may exercise their rights, including the right to:
• obtain confirmation as to whether or not personal data concerning them is being processed;
• access their personal data;
• request the rectification or updating of their personal data;
• request erasure, where permitted;
• request restriction of processing;
• object to processing where applicable;
• request data portability, where applicable;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.
Requests may be sent to [email protected].
Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority.
10. COOKIE POLICY
What are cookies?
Cookies are small text files that a website may store on a user's device while they browse the website.
They may be used to ensure the proper operation of the website, remember certain preferences and provide specific features.
Necessary cookies
The website may use technical cookies that are strictly necessary for its operation and for the functioning of the booking system.
These cookies may be necessary, for example, for:
• navigation and security;
• managing cookie preferences;
• selecting language or currency;
• checking availability;
• session management;
• completing forms;
• operating the booking and payment process.
Disabling strictly necessary cookies may affect the proper functioning of certain parts of the website.
Functional and third-party cookies
Certain features connected to services used by the website may involve the use of cookies or similar technologies by the relevant service providers.
Where external services are used, they may process information in accordance with their respective privacy and cookie policies.
Analytics and marketing cookies
At the time of this policy, Le Ninfee has not directly configured Google Analytics, Meta/Facebook Pixel or any other proprietary advertising profiling systems on the website through the website's custom code area.
Should analytics tools, advertising tools or other technologies that are not strictly necessary be introduced in the future, this policy will be updated and, where required by law, such technologies will only be used after obtaining the user's consent.
11. COOKIE CONSENT MANAGEMENT
On the user's first visit, the website may display a banner allowing them to:
• accept cookies;
• reject non-essential cookies;
• customise their preferences.
Rejecting non-essential cookies does not prevent the use of the website's essential features.
Users may also manage or delete cookies through their browser settings. However, disabling certain technical cookies may affect the operation of some website features.
12. LINKS TO EXTERNAL WEBSITES AND SERVICES
The website may contain links to websites or services operated by third parties.
Le Ninfee does not control how these third parties process personal data once the user accesses their services. Users are therefore advised to consult the relevant providers' privacy and cookie policies.
13. SECURITY
Le Ninfee implements organisational and technical measures appropriate to the nature of the data processed and uses specialised service providers to protect personal data against unauthorised access, loss, disclosure or unlawful use.
14. CHANGES TO THIS POLICY
This Privacy and Cookie Policy may be updated to reflect changes in legislation, technology or the services used.
The updated version will be published on this page. Users are therefore advised to review it periodically.
Last updated: 23 August 2026
For information or enquiries regarding the protection of personal data:
Le Ninfee – Tourist Apartment
Data Controller: Isabella Bizzini
Email: [email protected]