Privacy notice
Privacy Policy
This Privacy Policy describes how personal data are processed when users visit the website bedandbrains.it or contact Bed&Brains to request information about residences, available rooms or application procedures.
Last updated: 3 July 2026
1. Data Controller
The Data Controller is:
MAG S.r.l.s.
Registered office: Via Staurenghi n.32 - 21100 Varese (VA)
VAT number / Tax code: 03611720123
Email: info@bedandbrains.it
2. Categories of personal data processed
The website may process:
- technical browsing data, such as IP address, browser information, device information and pages visited;
- data voluntarily provided by the user by email, such as name, surname, email address, telephone number and information relating to accommodation or application requests;
- any additional data included by the user in communications sent voluntarily.
3. Purposes of processing
Personal data may be processed for the following purposes:
- to enable proper browsing of the website;
- to respond to information requests sent by email;
- to manage requests relating to availability, applications, rooms and residences;
- to comply with legal, regulatory or administrative obligations;
- to protect the rights of the Data Controller in the event of disputes.
4. Legal basis for processing
Depending on the case, the processing of personal data is based on the following legal grounds:
- performance of pre-contractual measures requested by the data subject, in order to respond to information or application requests;
- compliance with legal obligations applicable to the Controller;
- the legitimate interest of the Controller in managing the website, ensuring IT security and protecting its rights.
5. Processing methods
Processing is carried out using IT, electronic and organisational tools suitable to ensure the security, confidentiality and integrity of personal data. Personal data will not be subject to indiscriminate disclosure.
6. Data retention
Personal data will be retained for the time necessary to handle the user’s request and, subsequently, for the period required by legal obligations or for the protection of the Controller’s rights. Data relating to requests not followed by further relationships may be kept for a limited period proportionate to the purposes described above.
7. Disclosure of personal data
Personal data may be processed by persons authorised by the Controller and by technical or professional service providers, such as hosting providers, IT consultants, administrative or legal consultants, within the limits necessary for their respective activities.
8. Data transfers
The website is hosted through third-party technology services. Where personal data are processed outside the European Economic Area, the Controller will adopt the safeguards required by applicable law.
9. Data subject rights
Within the limits provided by applicable law, users may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability. Users also have the right to lodge a complaint with the Italian Data Protection Authority.
Requests may be sent to: info@bedandbrains.it.
10. Cookies
For further information on the use of cookies and similar technical tools, please see the Cookie Policy.