Privacy Policy
Last updated: 15 October 2026
This notice applies to the website, to enquiries and to stays at Hotel Ancora and Casa alle Colonne (Art. 13 and 14 of Regulation (EU) 2016/679, «GDPR»).
Who processes your data
Bieno S.r.l., which operates Hotel Ancora and, in winter, Casa alle Colonne by Hotel Ancora.
- Registered office: Via Mameli 65, 28921 Verbania Intra (VB)
- Tax code and VAT no.: 00429610033 · REA VB-60005
- Email: info@hotelancora.it · PEC (certified email): bienosrl@pecvb.it
- Phone: +39 0323 53951
We have not appointed a data protection officer (DPO): for any questions, write to info@hotelancora.it.
What data, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Browsing data: IP address, date and time, pages viewed, browser type (server logs) | Running the website and protecting it from misuse | Legitimate interest (Art. 6.1.f GDPR) |
| What you send us by email, phone or WhatsApp: name, contact details, dates, requests | Replying to you and preparing an offer | Pre-contractual measures at your request (Art. 6.1.b) |
| Booking data: name, contact details, dates, guests, payment details | Managing the booking and the stay | Contract (Art. 6.1.b) |
| Identity document details of each guest, including minors, collected on arrival or at the self check-in kiosk | Mandatory reporting to the Questura (police), tourism statistics, city tax | Legal obligation (Art. 6.1.c; Art. 109 TULPS) |
| Tax and accounting data | Invoices, receipts and records | Legal obligation (Art. 6.1.c) |
The website has no forms to fill in and does not use analytics, profiling or advertising tools. We do not make automated decisions about you.
Where the data comes from
Usually you give it to us. If you book through Booking.com, Expedia, an agency or a company, we receive the booking data from them: name, contact details, dates, guests and any requests.
Are you required to provide it?
- Identity document details of each guest are required by law: without them, we cannot accommodate you.
- Booking data is needed for the contract: without it, we cannot confirm your booking.
- What you write to us in your enquiries is up to you.
Who we share it with
- With the suppliers who help us run our business, as data processors (Art. 28 GDPR): website hosting, the Simple Booking booking engine, the hotel management system, the self check-in kiosk provider, tax advisers.
- With the portals and agencies through which the booking was made, in order to manage it.
- With public authorities, when required by law (Questura, Municipality, statistics bodies, tax authorities).
- If you write to us on WhatsApp, the message also passes through WhatsApp (Meta group), subject to its own terms.
We do not sell your data to anyone.
Outside the European Union
The website does not use external services that transfer data outside the European Union: fonts, photos and videos are hosted on our own server. If you write to us on WhatsApp or use the links to Facebook, Instagram or Google Maps, those services may transfer data to the United States, in accordance with their own privacy policies; they adhere to the EU–US Data Privacy Framework or use the standard contractual clauses of the European Commission.
How long we keep it
- Server logs: up to 12 months.
- Enquiries without a booking: the time needed to reply, and up to 24 months.
- Bookings and accounting records: 10 years, as required by law.
- Identity documents: we do not keep copies of the document. The data is used only to send it to the Questura; we keep the transmission receipt for 5 years, as required by law.
How we protect your data
Access only for staff who need it, with personal credentials; website on an encrypted connection (HTTPS); suppliers chosen under contracts that bind them to the same standards. In the event of a personal data breach, we notify the Garante within 72 hours, as required by law.
Your rights
You can ask us at any time to access your data, rectify it, erase it, restrict its processing, object to processing or receive it in a machine-readable format (Articles 15–22 GDPR). Simply write to info@hotelancora.it: we reply within one month.
If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): garanteprivacy.it.
Changes
If we change this notice, we will update the date at the top.
See also the cookie policy.