Privacy Policy
Last updated: August 2026
This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes how Borgo dei Gatti S.r.l. collects, uses and protects the personal data of users who visit and use the Relais Borgo dei Gatti website (the “Website”) and its related services.
Personal data are processed in accordance with the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimisation, accuracy, integrity and confidentiality established by the GDPR.
1. Data Controller
The Data Controller is:
Borgo dei Gatti S.r.l.
Via Circonvallazione 7
27047 Golferenzo (PV) – Italy
VAT No. 02851990180
Email: info@
2. Personal data we process
Depending on how you use the Website and its services, we may collect and process the following categories of personal data:
- identification and contact details, such as first name, surname, email address, telephone number and any other information voluntarily provided;
- information relating to enquiries and bookings, including data necessary to manage your stay or the services requested;
- information provided through our communication channels, including WhatsApp where you choose to contact us through this service;
- newsletter subscription data, where you voluntarily choose to subscribe;
- browsing and technical data, such as IP address, browser and device type, operating system, pages visited and other technical information generated while using the Website;
- data collected through cookies and similar technologies, as further described in the Website’s Cookie Policy.
Please avoid providing special categories of personal data unless strictly necessary.
3. Purposes and legal bases of processing
Personal data may be processed for the following purposes.
A. Enquiries and booking requests
We use the information you provide to respond to enquiries submitted through the Website, email, telephone, WhatsApp or other available communication channels and to provide information regarding stays, availability, services and experiences.
Legal basis: taking steps at the request of the data subject prior to entering into a contract and, where applicable, performance of a contract (Article 6(1)(b) GDPR).
Providing the data required for these purposes is optional; however, failure to provide them may prevent us from responding to your enquiry or providing the requested service.
B. Management of bookings and purchased services
Personal data may be used to manage bookings, stays, payments, guest communications and any services or experiences requested.
Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) and compliance with applicable legal obligations (Article 6(1)(c) GDPR).
C. Compliance with legal obligations
Personal data may be processed in order to comply with administrative, accounting, tax, public security or other obligations imposed by applicable law.
Legal basis: compliance with a legal obligation to which the Data Controller is subject (Article 6(1)(c) GDPR).
D. Newsletter and marketing communications
Where you choose to subscribe to our newsletter, your email address may be used to send news, information, initiatives, events, offers and communications relating to Relais Borgo dei Gatti.
Legal basis: your consent (Article 6(1)(a) GDPR).
Subscription is voluntary and consent may be withdrawn at any time by using the unsubscribe link contained in our communications or by contacting info@
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
E. Operation, security and improvement of the Website
Certain technical data may be processed to ensure the proper functioning and security of the Website, prevent misuse or technical issues and enable the management of our online services.
The applicable legal basis depends on the specific processing activity and may consist of the need to provide the requested service or the legitimate interest of the Data Controller in maintaining the security and proper functioning of its systems, while respecting the rights and freedoms of data subjects.
F. Analytics, cookies and tracking technologies
The Website may use technical cookies and, depending on its configuration, cookies or other measurement, analytics or marketing technologies, including technologies provided by third parties.
Cookies that are strictly necessary for the operation of the Website may be used without consent where permitted by applicable law.
Any cookies or tracking technologies requiring consent will only be activated after you have expressed your choice through the cookie banner or preference management tool.
For detailed and up-to-date information about the cookies and technologies actually used, their purposes, duration and providers, and to change your preferences at any time, please refer to the Website’s Cookie Policy.
4. How we process your data
Personal data are processed using electronic, digital and, where necessary, paper-based systems, with appropriate technical and organisational measures designed to protect them against loss, unlawful or improper use, unauthorised access, alteration or disclosure.
Personal data are processed solely for the purposes described in this Privacy Policy and in accordance with the principles of relevance, proportionality and data minimisation.
5. Who may receive your personal data
Where necessary for the purposes described above, personal data may be disclosed to:
- employees and collaborators authorised by the Data Controller;
- IT, hosting, Website management and maintenance providers;
- online booking and technology service providers connected with the Website;
- communication, newsletter and messaging service providers;
- accountants, consultants, professional advisers and other parties assisting the Data Controller with administrative, tax or legal obligations;
- suppliers and partners involved in providing services or experiences requested by the user;
- public authorities, law enforcement agencies or other parties where disclosure is required by law or by a competent authority.
Where required, service providers processing personal data on behalf of the Data Controller will be appointed as Data Processors pursuant to Article 28 GDPR.
Personal data will not be publicly disclosed except where expressly required by law.
6. Third-party services and platforms
The Website may integrate services provided by third parties, such as online booking systems, analytics tools, maps, multimedia content, communication services or other functionalities.
The use of these services may involve the processing of personal data in accordance with the privacy policies of the relevant providers.
Up-to-date information about services using cookies or other tracking technologies is available in the Website’s Cookie Policy and cookie preference management tool.
7. Transfers outside the European Economic Area
Some technology service providers used by the Website may involve the processing or transfer of personal data to countries outside the European Economic Area (“EEA”).
Where this occurs, transfers will be carried out in accordance with Articles 44 et seq. of the GDPR and on the basis of the mechanisms provided for by applicable law, such as an adequacy decision by the European Commission or, where necessary, appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
Further information regarding transfers associated with specific tracking technologies or third-party services is available in the Cookie Policy and in the privacy information provided by the relevant service providers.
8. Data retention
Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected and thereafter for any additional period required by applicable law.
In particular:
- data relating to enquiries or quotation requests are retained for the time necessary to handle the request and any subsequent relationship;
- data relating to bookings, stays, payments and administrative or tax documentation are retained for the period required under applicable law;
- data used for newsletter purposes are retained until consent is withdrawn or deletion is requested, subject to any additional period necessary to document the withdrawal of consent or comply with legal obligations;
- data collected through cookies and similar technologies are retained for the periods specified in the Cookie Policy and cookie preference management tool.
9. Your rights
Under Articles 15-22 GDPR and where the relevant legal requirements are met, you have the right to:
- obtain confirmation as to whether your personal data are being processed and access such data;
- request correction of inaccurate data and completion of incomplete data;
- request deletion of your personal data where provided for by law;
- request restriction of processing;
- where applicable, receive your personal data in a structured, commonly used and machine-readable format and request their transmission to another controller;
- object to processing in the circumstances provided for by law;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- where applicable, not be subject to a decision based solely on automated processing which produces legal effects or similarly significantly affects you.
To exercise your rights, please contact:
Exercising these rights is free of charge, except in the case of manifestly unfounded or excessive requests as provided for by applicable law.
10. Right to lodge a complaint
If you believe that your personal data are being processed in breach of applicable data protection law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or with another competent supervisory authority pursuant to Article 77 GDPR.
11. Cookie Policy
For detailed information regarding cookies and other tracking technologies, their purposes and the third parties involved, and to manage or change your preferences, please refer to the Cookie Policy available on the Website.
12. Changes to this Privacy Policy
The Data Controller reserves the right to amend or update this Privacy Policy, including as a result of changes in applicable law, the introduction of new services or changes to the way personal data are processed.
The most recent version will be published on the Website together with the date of the latest update.