Holiday rental · Ivrea

Privacy Policy

Last updated: 13 July 2026

This notice describes how the personal data of users who browse the website ilbunker.it and interact with its services are processed, pursuant to Regulation (EU) 2016/679 ("GDPR").

1. Data Controller

The Data Controller is Ernesto Malosti, host of the holiday rental "Il Bunker".

2. Types of data collected

The website collects, directly or through third parties, the following categories of data:

  • Data provided voluntarily by the user: by filling in the availability request form or contacting us by email, phone or WhatsApp, you provide data such as full name, email address, phone number, stay dates, number of guests and any information contained in your message.
  • Browsing data: the IT systems running the website acquire, during normal operation, some data whose transmission is implicit in the use of Internet protocols (e.g. IP address, browser and device type, date and time of the request), used solely to obtain anonymous statistical information and to ensure the website works correctly.
  • Cookies and similar technologies: see the Cookie Policy for details.

Failure to provide the data marked as mandatory in the form may make it impossible to handle your request.

3. Purposes and legal bases of processing

  • responding to requests for information and availability and managing pre-contractual contacts — legal basis: pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR);
  • ensuring the security of the website and preventing automated spam submissions through the form — legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR);
  • complying with legal obligations, for example regarding taxation and the reporting of guest data to the competent authorities where applicable — legal basis: legal obligation (Art. 6.1.c GDPR).

4. Methods and place of processing

Data are processed using IT and electronic tools, adopting technical and organisational measures appropriate to ensure their security, confidentiality and integrity. Data are stored on the hosting provider's servers located within the European Union, except as indicated in the section on third-party services below.

5. Third-party services

The following providers, which may process data as processors or independent controllers, are used to run the website:

  • Aruba S.p.A. — website hosting and email service used to send and receive the form messages. Data stored on servers within the European Union.
  • Google reCAPTCHA (Google Ireland Ltd.) — protection of the form against automated submissions; it analyses the user's browsing data and behaviour and may set cookies, with data transfer to Google. Google Privacy Policy.
  • Google Fonts (Google Ireland Ltd.) — delivery of web fonts; to serve the fonts it receives the user's IP address. Google Privacy Policy.
  • Content Delivery Networks (CDN) — jsDelivr and Cloudflare, used to deliver technical libraries (graphic framework and icons); to serve the files they receive the user's IP address.

6. Cookies

The website uses technical cookies necessary for its operation and, subject to consent, any third-party cookies. For details and to manage your preferences see the Cookie Policy.

7. Retention period

Data provided through the form and email communications are kept for the time needed to handle the request and any resulting relationships, and thereafter for the time required by legal obligations (in particular tax-related). Browsing data are kept only for the time strictly necessary for technical and security purposes.

8. Disclosure of data

Data are neither disseminated nor sold to third parties for marketing purposes. They may be disclosed only to parties providing services functional to the website (e.g. the hosting provider) and to the competent authorities where required by law.

9. Transfer of data outside the EU

Some third-party services (in particular those provided by Google) may involve the transfer of data to third countries, including the United States. Such transfers take place in compliance with the safeguards provided by the GDPR (e.g. Standard Contractual Clauses adopted by the European Commission or applicable adequacy mechanisms).

10. Rights of the data subject

As a data subject you may exercise the following rights:

  • access to your data and a copy thereof (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18);
  • objection to processing based on legitimate interest (Art. 21);
  • data portability (Art. 20);
  • withdrawal of any consent given, without affecting the lawfulness of prior processing.

To exercise your rights, write to info@ilbunker.it.

11. Complaint to the supervisory authority

If you believe that the processing of your data infringes the applicable law, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of your country of residence.

12. Changes to this notice

The Controller reserves the right to amend or update this notice, also as a result of regulatory changes. Changes will be published on this page together with the date of the last update.