Privacy policy

Last updated: 27 October 2026.

1. Data controller

B&B Spring di Morettini Elisa, Strada delle Pulite 30 – 06125 Perugia, Italy, VAT no. 03361140548. For any privacy request you can call +39 338 3855796 or write to info@bbspring.it.

2. What data we process and why

Requests from the website

When you write to us through the contact form we process your name, email, telephone number (if you give it) and what you write in the message, only to reply to you and, if you ask, to organise your stay or the shuttle. Legal basis: pre-contractual measures requested by you (Art. 6.1.b GDPR). The form sends an email to our mailbox, managed by a hosting provider with servers in the European Union; we keep requests for a maximum of 10 years, unless the law requires otherwise.

Bookings and stays

Online bookings take place on the external booking system direct-book.com, which processes data according to its own privacy policy. For your stay we process the data needed for the contract, for the legal obligations of accommodation providers (reporting guests to the police, tourist tax) and for invoicing (Art. 6.1.b and 6.1.c GDPR), kept for a maximum of 10 years, unless the law requires otherwise.

Telephone, WhatsApp and email

If you call or write to us, we use your number or address only to reply to you.

Browsing the website and cookies

The website uses only technical cookies needed for it to work and to remember the language; it does not use statistics or marketing tools. Details are in the cookie policy. Fonts and the map are served by our own website: no requests to external services while you browse. Links to Tripadvisor, Google Maps and the booking system lead to third-party websites, with their own policies.

The consent log, kept in the website database, records your cookie choice, the date, the version of the policy, your IP address, browser, and the page and language from which you made it.

3. Who can see the data

The data are processed by us and by authorised people working with us; they may be disclosed to the suppliers who help us run the website and our services (hosting, email, tax advice), appointed as data processors, and to the authorities when required by law. The website and email are managed by hosting providers with servers in the European Union. We do not sell or hand over data to third parties for commercial purposes.

4. Transfers outside the European Union

The data remain in the European Union: we do not transfer them to non-EU countries.

5. Your rights

You can ask us at any time for access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing (Articles 15–22 GDPR); where processing is based on consent you can withdraw it at any time, without affecting processing already carried out. Just contact us at the details in point 1. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

6. Changes

We may update this policy when laws or the website services change: the date of the last update is shown at the top.