Privacy & cookie policy

Pursuant to Articles 13 and 26 of Regulation (EU) 2016/679 (GDPR) · Last updated: 28/09/2026

1. Data controllers

This website presents two separate accommodation businesses, each with its own data controller:

• La Casa di Kro (Via Strazzacappe 6, Bologna – CIR 037006-AT-02065, CIN IT037006C2MJWYHZHN): controller Luigi Lidonnici, Via Scopelliti 7, 88900 Crotone (KR), Italy.
• Favola B&B Bologna (Via Mascarella 84, Bologna – CIN IT037006C1QFQDVR2R): controller Saverio Lidonnici, Via Mascarella 84, 40126 Bologna (BO), Italy.

For this website and the shared contact channels (e-mail info@lacasadikro.it, phone and WhatsApp +39 340 222 4310) the two controllers act as joint controllers under Article 26 GDPR. In short, their arrangement provides that:

• the contact channels are handled by a single contact person appointed by both controllers;
• each controller is responsible for the data relating to enquiries and stays at its own property;
• you can exercise your rights by writing to info@lacasadikro.it, whichever property is concerned: your request will be passed to the competent controller.

2. What data we process

• Browsing data. Like any website, the server hosting these pages automatically records some technical data (IP address, date and time, page requested, browser) in its logs, used only for security and to keep the site running.
• Data you send us. Name, contact details, stay dates, number of guests and any other information you choose to give us by e-mail, phone or WhatsApp. The "Check availability" form does not send or store any data on the website: it only prepares a message that you send yourself with your e-mail app or WhatsApp.
• Stay data. If you book, we process the data needed to manage your stay, including the identity document details required by Italian law.

3. Purposes and legal bases

• Answering enquiries and preparing quotes – pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Managing the booking and the stay – performance of a contract (Art. 6(1)(b) GDPR).
• Complying with legal obligations for accommodation providers, including reporting guests' details to the police (Art. 109 TULPS), tourist tax, statistical surveys and tax obligations – legal obligation (Art. 6(1)(c) GDPR).
• Keeping the website secure through server logs – legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for marketing and we do not sell it to third parties.

4. Recipients

• Aruba S.p.A., website and e-mail hosting provider, acting as data processor.
• Public authorities (police, City of Bologna, statistical bodies), where required by law.
• Advisers (e.g. accountant) for tax obligations, bound by confidentiality.
• If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta group) under its own privacy policy and may involve transfers of data outside the European Union.
• If you book through Booking.com, Booking.com processes your data as an independent controller under its own privacy policy.

5. Retention

• Enquiries not followed by a booking: for as long as needed to reply and in any case no longer than 12 months.
• Booking, tax and administrative data: for the period required by law (for tax records, normally 10 years).
• Server logs: for the period set by the hosting provider for technical and security purposes.

6. Cookies and third-party services

This website uses no cookies, technical or profiling, and no analytics tools or advertising pixels. The OpenStreetMap map loads only if you click "Show map": your browser then connects to the OpenStreetMap Foundation's servers, which receive your IP address. Links to Booking.com, Google Maps and WhatsApp lead to external services with their own privacy policies.

7. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15–22 GDPR), by writing to info@lacasadikro.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of your country.

Providing your data is optional, but without the necessary data we cannot answer enquiries or manage your stay.

8. Changes

This policy may be updated; the date of the latest change is shown at the top.