How we handle the personal data of people who visit the site, book a stay or write to us. In short: we only use the data we need, we do not sell it to anyone, and you can ask us at any time to see it, correct it or delete it.
Last updated: 1 October 2026
Who is the data controller
Quattro Punti S.r.l. (Incanto di Luna Hotel)
Registered office: Loc. Punta Grò, 25019 Sirmione (BS), Italy
Hotel: Via Verona 280, 25019 Sirmione (BS), Italy
VAT no. and tax code 02966190981
Email: info@incantodilunahotel.it
Phone: +39 030 7778591
PEC (certified email): info@pec.puntagrobeachbar.it
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.
What data we collect
Data you give us: first name, last name, email, phone number, country of origin, dates of stay, number of guests, any special requests you choose to tell us about, and the content of the requests you send us through the website forms, by email or by phone.
Guest data for the stay: on arrival, as required by law, we collect the personal details and identity document details of each guest.
Payment data: payments for online bookings are handled by the booking system and the payment service provider: we do not see or store your card number.
Data collected while browsing: IP address, browser and device type, pages visited, and the data collected by cookies and similar tools, only within the limits of the choices you make in the cookie banner.
Why we use it and on what legal basis
Bookings and stays. To receive and confirm your booking, manage your stay, contact you if needed and answer your requests. Legal basis: performance of pre-contractual measures and of the contract (Art. 6.1.b GDPR). Online bookings go through the Bedzzle system.
Requests from the website, email and phone. To answer your questions and prepare proposals. Legal basis: pre-contractual measures at your request (Art. 6.1.b).
Legal obligations. Communication of guest data to the public security authority (Art. 109 of the Italian Consolidated Law on Public Security), statistical surveys, tourist tax, tax and accounting obligations, requests from the authorities. Legal basis: Art. 6.1.c.
Statistics and advertising. Measuring visits to the site and the effectiveness of our campaigns with Google Analytics, Google Ads and Meta (Facebook and Instagram), only if you accept in the cookie banner (Art. 6.1.a).
Security and operation of the website. Protecting the site from abuse and ensuring it works properly. Legal basis: our legitimate interest (Art. 6.1.f).
Who we share it with
Your data is not sold or disclosed. It can be accessed by our authorised staff and by the providers who help us deliver the service, appointed as data processors:
Bedzzle (booking engine and booking management)
WP Engine (website hosting)
Google (Tag Manager, Analytics, Ads, Fonts)
Meta Platforms (measurement of campaigns on Facebook and Instagram)
Stape (server-side management of measurement data)
IT service providers, consultants, accountants and law firms, credit institutions, as strictly necessary.
By law we also communicate guest data to the Police Headquarters (Questura) and, for the tourist tax, to the Municipality of Sirmione.
The up-to-date list of data processors can be requested by writing to info@incantodilunahotel.it.
Transfers outside the European Union
Some providers (for example Google and Meta) may process data in the United States. In these cases the transfer is based on the European Commission adequacy decision (EU-US Data Privacy Framework) or on the standard contractual clauses approved by the Commission.
How long we keep it
Bookings and stays: for the time needed to manage them and up to 24 months after the stay.
Requests from the website: up to 24 months from the last contact.
Guest data required by law: for the period set by the regulations.
Tax and accounting data: 10 years, as required by law.
Cookies: for the duration stated in the cookie policy.
How we protect the data
We use appropriate technical and organisational measures to protect data from unauthorised access, loss or alteration: encrypted connection (HTTPS), access restricted to authorised staff, providers that offer adequate guarantees.
Your rights
At any time you can ask us to: access your data and obtain a copy; correct or update it; delete it; restrict its processing; object to processing based on our legitimate interest; receive the data in a readable format and transfer it to others (portability); withdraw the consent given, without affecting what was done before.
To exercise your rights write to info@incantodilunahotel.it: it is free and we reply within one month.
If you believe the processing violates the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookies
For the cookies and tracking tools used on the site, and to change your choices at any time, read the cookie policy.
Changes to this notice
We may update this notice, for example if the services we use change. The version in force is always this page, with the date of the last update at the top.