Data controller
Data controller: Barbara Adami.
Property: B&B Mas dei Masi di Adami Barbara – sole proprietorship, Via Gianarde 26/A, 38033 Masi di Cavalese (TN), Italy — VAT number (P.IVA) 02537540227.
For any privacy-related request: info@masdeimasi.com or +39 334 207 7978.
What personal data is collected
In connection with information requests and bookings, the following data may be collected, for example:
- first and last name;
- email address;
- phone number, if provided;
- data needed to manage the booking and the stay;
- any further data the data subject voluntarily provides in the request.
For guests of the property, the identification data required to comply with the regulations applicable to accommodation facilities may also be processed.
Purposes of processing
Personal data is processed to:
- respond to information requests received through the website;
- handle availability requests and bookings;
- organise and manage the stay at the property;
- fulfil administrative, tax and accounting obligations required by law;
- fulfil the identification and reporting obligations required by the regulations for accommodation facilities;
- protect the controller's rights, including in court if necessary.
Legal basis for processing
Processing data to handle requests and bookings is necessary to carry out pre-contractual measures or the contract requested by the data subject.
Processing necessary to comply with legal obligations is based on Art. 6(1)(c) GDPR.
Any processing based on consent will be requested separately and can be withdrawn at any time.
Provision of data
Providing the data necessary to respond to requests and manage a booking is required in order to provide the requested service.
Failure to provide the essential data may make it impossible to respond to the request or proceed with the booking.
How data is processed
Data is processed using paper-based and/or IT tools, in accordance with the principles of fairness, lawfulness, transparency, data minimisation and security required by data protection law.
Adequate technical and organisational measures will be adopted to protect data from unauthorised access, loss, destruction or improper disclosure.
Sharing of data
Data may be shared, to the extent necessary for the purposes above, with parties acting on behalf of the controller or to whom disclosure is required by law. For example, the following may be involved:
- the property's accountant and consultants;
- IT and website management service providers;
- service providers necessary to manage bookings;
- public and law-enforcement authorities, in the cases provided for by law.
Data will not be disclosed to the public.
Cookies and third-party content on the site
In addition to the processing described above, the computer systems used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of the Internet (e.g. IP address, browser type, pages visited), used only to gather anonymous statistics and check that the site is working correctly.
The site uses a single technical cookie, which does not require consent:
- md_lang: remembers the language you chose (Italian, German or English) for future visits. Lasts 1 year.
If you log into the site's restricted area (property staff), a session cookie (mdm_admin_sess) is also created; it only concerns authorised staff and is deleted when the browser is closed or on logout.
Some content on the site is provided by external services and only loads after you give your consent, because the providers may set their own cookies or collect data such as your IP address:
- Google Maps: the map in the Contact section, provided by Google LLC. Privacy notice: policies.google.com/privacy.
- Booking system (Hotel in Cloud): the form to check availability and book, provided by Hotel in Cloud (booking.hotelincloud.com). The data you enter when booking is also processed directly by Hotel in Cloud under its own privacy notice.
The site also uses Google Fonts typefaces (fonts.googleapis.com and fonts.gstatic.com): this means your IP address is sent to Google's servers on every visit, regardless of cookie consent, because it is needed to display the site's text correctly.
Your cookie choices
You can accept or reject third-party content from the banner shown on your first visit, and change your choice at any time via the "Cookie preferences" link at the bottom of the page.
You can also manage, block or delete cookies from your browser settings; blocking all cookies may stop some parts of the site (such as the map or the booking form) from working.
Data retention
Personal data will be kept for the time necessary to achieve the purposes for which it was collected and, subsequently, for the period required by legal obligations, including tax and accounting obligations.
Data relating to information requests that do not turn into a booking will be kept for no longer than necessary to handle the request, subject to further legitimate needs or legal obligations.
Your rights
Where provided for by law, the data subject has the right to:
- obtain confirmation of whether personal data concerning them exists;
- obtain access to their data;
- request rectification of inaccurate data;
- request erasure of data, where applicable;
- request restriction of processing;
- object to processing in the cases provided for by law;
- request data portability, where applicable;
- withdraw consent, where processing is based on consent.
Requests can be addressed to the data controller using the contact details given in this notice.
The data subject also has the right to lodge a complaint with the competent data protection supervisory authority if they believe the processing of their data breaches applicable law.
Updates
This notice may be updated due to regulatory, organisational or service-related changes.
Last updated: 03/09/2026.