Dear Guest,
In accordance with current legislation on the protection of personal data, we wish to inform you as provided for Art. 13 of the EU regulation 2016/679 – hereinafter GDPR (General Data Protection Regulation)- that the processing of your personal data shall be carried out with fairness and transparency, for lawful purposes and protecting your privacy and your rights as set out  by art. 5 of the aforementioned European Regulation document, ensuring the protection of individuals data under Article 1, paragraph 2 of the aforementioned Regulation, while respecting “The fundamental rights and freedoms of individuals "

The data controller is The Badia di Orvieto S.r.l. with registered office in Località La Badia, 8 – 05018 Orvieto (TR); VAT number/tax code 00354770554; Website; its legal representative being Alessandro Bambini.

The data being processed, necessary for the implementation of agreements and the services required are of a personal nature and for identification, accounting and taxation purposes; such data being: first name, last name, email address, phone number, date and place of birth, address, sex, tax/VAT ID data, bank details, etc.. The data Controller also uses channels and web networks such as social networks and therefore the processing of personal data of users complies with policy in use on these platforms (Twitter, Facebook, YouTube, etc.). The data shared by users through private messages sent directly to the Data Controller will be treated in compliance with the laws in force on data protection.

Your data will be processed both in paper and  electronic form for the following purposes:
a. to acquire and confirm your booking of accommodation services, ancillary services as you requested by you;
b. to fulfill the obligation under the "Consolidated Law on Public Safety" (article 109 R.D. of 18.6.1931 n. 773) by notifying the Police for  public safety purposes with the details of our guests stay in accordance with the procedures required by Ministry of the Interior (Decree 7 January 2013);
c.  to comply with current administrative, accounting and tax obligations;
d. to speed up the registration procedures in the event of subsequent stays at our facility;
e. to carry out the function of receiving messages and phone calls routed to you during your stay, if required or needed;
f. to send you our promotional messages and updates on rates and offers for marketing and promotion purposes

The provision of data for the purposes expressed in points a., b., c., d., is  mandatory for all that is required by legal and contractual obligations and by the regulations in force in Italy; Therefore any refusal to supply them in whole or in part may result in the impossibility of providing you with the services requested. The provision of data for the purposes expressed in letters, d., e., f., are optional and may be made at your discretion on the basis of clearly expressed consent, namely through the  approval of this policy and in relation to the purposes described. Your consent may be revoked at any time. Any refusal will result in the impossibility of providing you  with the services described. The treatment  will cease upon your departure but some personal data may or will continue to be processed for the purposes and in the manner specified.

Your data will be processed for as long as necessary to achieve the purposes referred to in paragraph 4 letters a., b., c., and subparagraphs d., e., f., after obtaining your written consent. The data will be retained for 10 years after acquisition.

Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be disclosed exclusively for the purposes specified above to the following categories of stakeholders:
Authorized institutions;
External Treatment Processors;
Supervisory and Control Authorities;

The data is used by the data controller and are not transferred to other countries. Personal information is stored on servers located in Italy.

 In relation to the processing of data described in this Information Notice, as a data subject you may, under the conditions laid down in the GDPR, exercise the rights set out in articles 15 to 21 and, in particular, the following rights:
Right of access Article 15 GDPR;
Right of rectification – Article 16 GDPR;
Right of withdrawal (right to cancel) – Article 17 GDPR;
Right to restriction of processing – Article 18 GDPR;
Right to data portability – Article 20 GDPR;
Right of objection – Article 21 GDPR;
The above rights may be exercised against the holder, by contacting references listed above. Right of withdrawal: the party has the right to revoke this consent at any time. Withdrawal of consent does not affect the legitimacy of the processing based on consensus prior to the revocation. You have the right to submit a complaint to the Guarantor Authority for the protection of personal data by writing to the following asddress: Piazza di Montecitorio # 121-00186 Roma (RM)

For any further information, and to exercise your rights recognized by the European Regulations GDPR, you may contact the data controller at the following addresses:

La Badia di Orvieto S.r.l. – Loc. La Badia, 8 – 05018 Orvieto (TR)
or via mail : This e-mail address is being protected from spambots. You need JavaScript enabled to view it
Or via PEC mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it



Cookies and javascript codes

This site uses cookies or javascript code . These are recordings of information transmitted by a web server to your computer for future identification of that computer at the time of future visits to the same website. These tools help to facilitate the analysis of web traffic , allow the proper operation of the Website and to enable web applications to send information to individual users.

With reference to the Users of the Website who are simply browsing on it without filling out forms or spontaneously send their personal data, and except as specified below with reference to specific software , no use is made of cookies for the transmission of information of a staff , nor are used cd Persistent cookies of any kind, or systems for tracking users.

The session cookies used in this site avoid recourse to other IT techniques potentially prejudicial to the privacy of users’ browsing and do not allow acquisition of personal identification data . At any time the user can erase cookies from your system in different ways depending on your browser , or set your browser not to accept cookies and enable JavaScript . In this case, however, is not guaranteed to work with all the tools that the site offers you.

This website uses Google Analytics, a web analytics service provided by Google, Inc. (” Google”). Google Analytics uses ” cookies”, which are text files that are stored on your computer to help the website analyze how users use the Site The information generated by the cookie about your use of the Site by you (including your address IP address ) will be transmitted to and stored by Google on servers in the United States . Google will use this information for the purpose of evaluating your use of the website , compiling reports on Site activity and providing other services relating to Site activity and internet usage . Google may also transfer this information to third parties where required to do so by law , or where such third parties process the information on Google’s behalf . Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, but this may prevent you from using all the features of this Site By using this site , you agree to the processing of data about you by Google in the manner and purposes set out above . To consult the privacy policy of the company Google on the Google Analytics service , please visit the website To learn about the privacy policies of Google Please endorse to