Privacy Policy
Last updated: October 2026. This notice explains how we process the personal data of people who visit the website and of those who request or make a booking, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
Dama Srls
Registered office: Via Dante 97 - 70122 Bari, Italy
VAT no. 08584110723
PEC (certified email): damabnb@pec.it
Email: info@damabnbbari.it
2. Data we process
- Booking and contact data: first name, last name, email, phone, stay dates, number of guests, special requests, messages sent through the contact form.
- Guest data: personal details and ID document of accommodated guests, which we are required by law to collect.
- Payment data: when online payment is active, it is handled directly by the payment provider; we do not store full card details.
- Technical data: IP address, browser and device type, pages visited, logged by the site's systems for security and proper operation.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Handling enquiries, availability and bookings; sending confirmations and service messages | Performance of a contract or pre-contractual steps (Art. 6.1.b GDPR) |
| Reporting guest data to public security authorities; tax and accounting duties; tourist tax | Legal obligation (Art. 6.1.c) |
| Website security, abuse and fraud prevention, defence of legal claims | Legitimate interest (Art. 6.1.f) |
| Optional third-party services (e.g. Google Maps) | Consent (Art. 6.1.a), which you can withdraw at any time |
We do not carry out profiling or decisions based solely on automated processing. We do not send marketing messages without your specific consent.
4. Retention
- Contract and accounting data: 10 years, as required by tax law.
- Enquiries or bookings not completed: up to 24 months.
- Guest data sent to the authorities: as required by law.
- Cookie preferences: 180 days.
5. Recipients
Data may be processed, as processors or independent controllers, by: hosting and email providers, the payment service provider, messaging services used for internal new-booking notifications, tax and legal advisers, and public authorities where the law requires. Data is neither disclosed nor sold.
6. Transfers outside the EU
The site does not transfer data outside the European Economic Area, except through third-party services you choose to enable (e.g. Google Maps) or providers applying GDPR safeguards (standard contractual clauses or adequacy decisions).
7. Cookies and analytics tools
The site uses technical cookies, necessary for it to work (for example remembering your cookie choices and language), which do not require consent.
With your consent, and only if enabled by the controller, the following may be loaded: analytics tools (Google Analytics / Google Tag Manager, Microsoft Clarity), which tell us in aggregate how the site is used and where visitors come from; marketing tools (Meta Pixel, Google Ads), which measure the effectiveness of campaigns; and third-party content such as the Google Maps map. These providers may set their own cookies and process data outside the European Economic Area, under their own policies.
With consent to analytics or marketing we also keep on your device the source of your visit (referring site or campaign) for 30 days; if you send a booking request we link it to the request to understand which channels work.
You can change your choice at any time from "Cookie preferences" in the footer; refusing does not prevent you from using the site or booking.
8. Your rights
You may request access, rectification, erasure, restriction and portability of your data, object to processing and withdraw consent where applicable. Write to info@damabnbbari.it or to the PEC damabnb@pec.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Changes
We may update this notice; the date above shows the latest version.