Legal information

Privacy Policy

This privacy policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”) and describes how the personal data of users who visit the website of L'Armonia is processed. L'Armonia is a bed & breakfast in the centre of Noci (BA), Puglia, comprising its two properties La Capasa and La Terrazza. The website is purely informational and serves to present the properties.

Last updated: 22 July 2026.

Data controller

The data controller is:

  • Name: L'Armonia di Benedetto D'Ambruoso
  • Registered/operating address: Via Principe Umberto 9, 70015 Noci (BA), Italy
  • Italian tax code: DMBBDT99A08F915G
  • National Identification Code (CIN): IT072031C100100004
  • Email: bblarmonia5@gmail.com
  • Phone: +39 351 406 5061

The controller has not appointed a Data Protection Officer (DPO), as this is not mandatory under Article 37 of the GDPR for the type of processing carried out.

Types of data processed

The website is a simple informational showcase and does not collect personal data through contact forms, member areas, online booking or payment systems: none of these tools is present. Any enquiries or bookings take place outside the website, through the property's direct contact channels (telephone, WhatsApp, email, social media) or through the third-party booking platforms (Booking.com and Airbnb), to which the website merely links.

As with any website, the hosting provider (Cloudflare) automatically processes certain technical browsing data (technical logs) needed for the operation and security of the service, in particular:

  • the IP address of the device used to connect;
  • information about the browser and operating system (user agent);
  • the date and time of the request, the pages requested and the outcome of the connection.

This data is not used to identify the user, is not linked to any other information, and is processed for the purposes of security, diagnostics and the prevention of abuse.

Purposes and legal bases of processing

The technical data above is processed for the following purposes and on the following legal bases under Article 6 of the GDPR:

  • Operation, security and integrity of the website (serving the pages, protection against attacks, diagnosing malfunctions): the legal basis is the legitimate interest of the controller and the hosting provider in ensuring a functioning and secure service (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations, where the retention of certain logs is required by applicable law (Art. 6(1)(c) GDPR).

No processing is based on consent, as the website does not use profiling cookies, analytics tools or any data-collection forms.

Direct contact: email, phone and WhatsApp

The website publishes the property's direct contact details (a phone number, also reachable via WhatsApp, an email address and social profiles). The website merely displays them: tel:, mailto: and wa.me links open the app already installed on the user's device, and no data is collected or transmitted by the website itself.

If you choose to contact the property, the controller processes the data contained in your message (name, contact details, information about the stay you are enquiring about and any other data you provide voluntarily) for the sole purpose of replying and, where applicable, managing the booking. The legal basis is the performance of pre-contractual measures taken at your request and the performance of the contract (Article 6(1)(b) GDPR). Providing the data is optional, but without it we cannot reply. Messages are kept for as long as is needed to handle the enquiry and, in the event of a stay, for the periods required by tax and public-security obligations.

Messages sent through WhatsApp travel over the infrastructure of WhatsApp Ireland Ltd. (Meta group), which acts as an independent controller for data processed through its own service: please refer to its privacy policy. If you would rather not use it, you can contact the property by email or by phone.

Bookings made through the Booking.com and Airbnb platforms are governed by the privacy policies of their respective operators, which act as independent controllers: this website merely links to the property pages on those platforms.

Typefaces (fonts)

The typefaces used to render the pages are self-hosted on the website's own domain and are loaded together with the site's other resources. They are not requested from Google's servers or from any other external provider: as a result, no IP address is disclosed to any third party, nor is any other data, in order to load the fonts.

Hosting and content delivery

The website is hosted on the Cloudflare Pages platform, provided by Cloudflare, Inc. Cloudflare acts as the hosting and content delivery network (CDN) provider and, in that capacity, processes the technical connection logs described above for the purposes of serving, securing and protecting the website. Connections to the website are protected via the HTTPS protocol.

Owing to the distributed nature of the CDN, technical data may also be processed on servers located outside the European Union. Cloudflare adopts appropriate safeguards under Articles 44 et seq. of the GDPR, including the Standard Contractual Clauses (SCCs). Further details are available in Cloudflare's privacy policy on the provider's website.

Data retention

The controller does not independently keep any database of website users. Technical logs are retained by the hosting provider for the time strictly necessary for security and diagnostic purposes, and in any case in accordance with Cloudflare's retention policies, unless a longer period is needed to establish or defend a legal claim or to comply with legal obligations.

No profiling or marketing

The website does not carry out any profiling of users, does not use tracking or statistical measurement (analytics) tools, and does not engage in marketing, behavioural advertising or automated decision-making within the meaning of Article 22 of the GDPR. Any data you provide through the direct contact channels is used solely to respond to your enquiry.

Your rights as a data subject

In relation to the personal data processed, you may exercise at any time the rights set out in Articles 15 to 22 of the GDPR, in particular:

  • the right of access to your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure (“right to be forgotten”);
  • the right to restriction of processing;
  • the right to object to processing based on legitimate interest;
  • the right to data portability, where applicable.

To exercise these rights you may contact the data controller by writing to bblarmonia5@gmail.com or by calling +39 351 406 5061. The controller will reply without undue delay and in any case within one month of receiving the request. You also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it), if you believe that your data is being processed in breach of the applicable rules.

Changes to this policy

The controller reserves the right to update this policy at any time in order to reflect legal, technical or organisational changes. Any amendments will be published on this page, together with the date of the latest update. Please check this section from time to time.

Back to home

Contact us