Privacy policy



Dear user/visitor (hereiafter also "data subject"), this section contains information on how to menage the site, in relation to the processing of date of user/visitor who consult it. This information is provided for the purposes of art.13 of the European Regulation 2016/679 (or also "GDPR").

The website, which can be reached at the address corresponding to the initial page, is used by Mr. Andrea Berti as a showcase to advertise its own accommodation facilities: the holiday house "La Torre delBennicelli" and theB&B "IlGallinaccio".

Children under the age of 18 who intend to contact the Owner should do so only through their parents who exercise parental responsibility.


Data Controller

The data controller is Mr. Andrea Berti as owner of the holiday house"La Torre del Bennicelli"and of theB&B"IlGallinaccio" with headquarters in 05018 Orvieto. Loc. Canale, nn. 8 and 9, hereinafter "Data controller".


Data object of processing

1) Navigation Data: Thecomputer systems and software procedures used to operate this website acquire, during their normal exercise, some personal data whose transmission is implicit in the Internet communication protocols. The collected information can be the following: internet protocol address (IP); browser type and parameters of the device used to connect to the site; name of the internet service provider (ISP); date and time of visit; web page of the visitor's origin (referal) and exit; possibly the number of clicks;

2) Data provided voluntarily by the user / visitor:The optional, explicit and voluntary sending by the interested party of electronic mail, of messages (also telephone correspondence) to the contacts indicated on this site, involves the subsequent acquisition of data by of the Consortium (email, telephone number, name and surname or other contact details).


Purposes and legal basis for the data processing

The data sub 1) are processed to guarantee the security and the correct functioning of the site. The legal basis of the processing is the legitimate interest of the Data controller pursuant to ex art. 6 paragraph 1 letter. f.

The data sub 2) are processed to handle requests for information and / or contact by the data subject himself. The legal basis is represented by the execution of pre-contractual measures adopted upon explicit request of the data subject pursuant to ex art. 6 paragraph 1 letter. b.


Processing methods, access and retention period 

The data processing is performed through computer procedures or in any case by electronic or paper tools directly by the Data Controller, by subjects specifically appointed by the Data Controller pursuant to art. 2-quarterdecies of the new Legislative Decree 196/2003, or by subjects identified as external processors pursuant to art. 28 GDPR, according to logics strictly connected to the purposes of the processing and, in any case, so as to guarantee security and confidentiality. Data will never be provided to third parties unless it is a legitimate request from the Judicial Authority and in the cases provided for by law.

Data sub 1) do not persist beyond 7 days (except for any need to investigate crimes by the Judicial Authority).

Data sub 2) will be processed for the strictly necessary to fulfill the requests for information received from the data subject.



Place of data processing and data transfer

Data are processed at the headquarters of the Data Controller in 05018 Orvieto. Loc. Canale, nn. 8 and 9 or at the Aruba Spa and Italiaonline SpA data centers (identified by the Data Controller as Data Processors pursuant to Article 28 GDPR, for the offered email service).

The web hosting provider, identified as the external data processor pursuant to art. 28 GDPR, is Aruba Spa.  Data centers of Data Processors are located in Italy or in any case within the European economic area.

Data Subject data are therefore not subjected to transfer to countries outside the EU.


Rights of Data Subject

The data subject has the right to obtain from the Data Controller, in the cases provided, access to his/her personal data and the correction or cancellation of the same or the limitation of the processing  or to oppose the processing (Articles 15 et seq. of the Regulation).The data subject may contact the supervisory authority responsible for the protection of personal data for any violation he/she believes has suffered, which for Italy is the Guarantor for the protection of personal data by e-mail, at the address: This email address is being protected from spambots. You need JavaScript enabled to view it. via fax: 06 696773785, or by postal service, to the Guarantor for the protection of personal data, which is based in Rome (Italy), Piazza di Monte Citorio n. 121, 00186.


Changes to this statement

The present circular may be subjected to changes. Therefore, it is advisable to always refer to the most updated version.

Rev. 20th August 2019


For any further information, and to enforce the rights recognized by the legislation on privacy, it is possible to send an email to the following addresses:

This email address is being protected from spambots. You need JavaScript enabled to view it.,This email address is being protected from spambots. You need JavaScript enabled to view it..





What are cookies (ref. Web doc. No. 3118884 -

Cookies are small text files sent from the site to the user's computer (usually to the browser), where they are stored before being re-transmitted to the site by the same user on his/her next visit. A cookie can not retrieve any other data from the user's hard disk nor transmit computer viruses or acquire email addresses. Each cookie is unique to the user's web browser. Some of the functions of cookies can be delegated to other technologies.

Types of cookies


1) Technical cookies

Technical cookies are those used for the sole purpose of "carrying out the sending of communications over an electronic network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide the service" (see article 122, paragraph 1 of Legislative decree 196/2003)

The installation of these cookies does not require the users' prior consent, without prejudice to the obligation of providing information pursuant to art.13 GDPR.


2) Profiling cookies

Profiling cookies are designed to create profiles relative to the user and are used in order to send advertising messages in line with the preferences expressed by the user when surfing the net. Due to the particular invasiveness that such devices can have in the private sphere of users, the legislation provides that the user must be adequately informed about their use and thus express his/her valid consent (Article 122 paragraph 1 Legislative Decree 196/2003).


Cookies used by the site (first-part cookies)

This web site does not uses cookies.

Third-party cookies

The site contains third-party cookies. The purposes of these cookies, the underlying logic and the related processing as well as the management of user preferences with respect to the cookies themselves are not determined and / or verified by the Website Owner, but by third parties as autonomous data controllers.For third-party cookies installed through the web site, the disclosure and consent obligations are borne by third parties.  The owner of the site, as a technical intermediary between these and the users, is required to insert the updated links to the informatives and to the consent forms of the third parties in the "extended" informative. The site contains cookies from the domain. The informative regarding the domain can be consulted at the following link

Disabling Cookies

The cookies stored on your device's hard drive can be disabled following the instructions provided by the main browsers, at the following links: