Skip to content
Book direct

Privacy and cookies

This page explains how Fraivolti processes the personal data of people who visit www.fraivolti.it, write to us, book a stay or complete the online check-in, and which cookies the website uses. We process your data fairly, lawfully and transparently, protecting your confidentiality and your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

Last updated: October 2026. Go to the cookie policy.

Information on the processing of personal data

Data controller

Marco Badan, Fraivolti
Calle dei Volti, San Polo 2837, 30125 Venezia, Italy
Email info@fraivolti.it · Phone +39 041 458 2752 · WhatsApp +39 328 354 8198

What data we process and why

  • Legal obligations. Italian law requires us to report every guest to the police within 24 hours of arrival, through the Alloggiati Web portal of the Polizia di Stato (art. 109 of the Consolidated Law on Public Security, TULPS), and to send statistical data on arrivals to the Veneto Region and ISTAT (Ross1000 system). For this, the online check-in form asks for each guest’s first name, surname, sex, date and place of birth, citizenship and residence, and for the lead guest also the type, number and place of issue of the identity document. As required by law, your identity will be checked on arrival. The Venice city tax is calculated from the age and residence given in the online check-in; we keep the receipts and the other records required for the city tax and for tax and accounting purposes. Legal basis: legal obligation (art. 6.1.c GDPR).
  • Bookings and stays. To manage your booking, payments, arrival and stay we process the booking holder’s details (name, email, phone, country), the dates, the number of guests, the accommodation booked and the payments. Card payments are handled by Stripe and PayPal payments by PayPal: we never see or store your full card details. Legal basis: performance of the contract (art. 6.1.b GDPR).
  • Messages and requests. When you write to us through the contact form, by email, WhatsApp or phone, we use the details you give us (name, email, phone, dates, message) to answer you and, if you ask, to prepare a booking. Legal basis: steps taken at your request before a contract (art. 6.1.b GDPR).
  • Website security. The server that hosts the website records technical data for each visit (IP address, browser, pages requested, date and time). To protect the contact form from spam, the site also keeps a non-readable (hashed) version of the sender’s IP address for one hour. Legal basis: our legitimate interest in keeping the website secure and working (art. 6.1.f GDPR).

We do not use your data for marketing or advertising.

How data is processed

Data is processed on paper and electronically by the data controller and by the people who work with Fraivolti, who are authorized and instructed to do so, with security measures suited to protecting it against loss, unauthorized access and misuse. Identity document numbers entered in the online check-in are stored in encrypted form. We do not make automated decisions or create profiles.

Mandatory or optional

Providing the data needed to register guests is required by law, and the booking data is needed to perform the contract. What you tell us in a message is up to you, but without your contact details we cannot reply.

If you do not provide the data

Without the data required by law we cannot host you: Italian law allows accommodation only for guests with a valid identity document, whose details must be reported to the police. Without the booking data we cannot confirm or manage your stay.

Who receives the data

  • The people who work with Fraivolti, authorized to process it.
  • Providers who process it on our behalf as data processors: Beds24 (booking management software) and Aruba S.p.A. (website hosting and email).
  • Stripe (card payments), PayPal and banks, as independent controllers.
  • Professionals who assist us, for example with tax and accounting.
  • Public authorities, when the law requires it: the Polizia di Stato (Alloggiati Web), the Veneto Region and ISTAT (tourism statistics), the City of Venice (city tax).
  • If you booked through a booking website, that website, as an independent controller.

You can ask for the up-to-date list of data processors by writing to info@fraivolti.it.

No dissemination

Your data is never published or sold. We take every reasonable measure to protect our IT systems from intrusion and use the data only for the purposes described on this page. If a provider processes data outside the European Economic Area, it does so only with the safeguards required by the GDPR, such as an adequacy decision or standard contractual clauses.

How long we keep it

  • Messages and requests: up to 12 months after the last contact, unless a booking follows.
  • Bookings, payments and city tax records: for as long as tax and accounting law requires, normally 10 years (art. 2220 of the Italian Civil Code).
  • Data entered in the online check-in: deleted automatically 90 days after departure.
  • Alloggiati Web receipts: 5 years, as required by law.
  • Server logs: for the short period set by the hosting provider.

Your rights

At any time you can write to info@fraivolti.it to exercise the rights set out in articles 15 to 22 of the GDPR. We reply as soon as possible and in any case within one month, as required by article 12 of the GDPR. You have the right to:

  • know whether we process data about you and receive a copy (access, art. 15);
  • have it corrected or completed (rectification, art. 16);
  • have it deleted, except data we must keep by law (erasure, art. 17);
  • have its processing restricted (restriction, art. 18);
  • receive it in a commonly used format, to pass it on to someone else (portability, art. 20);
  • object to processing based on our legitimate interest (objection, art. 21);
  • lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookie policy

This website uses only technical cookies, which are needed for it to work, and one statistics cookie of our own, which counts visits only in aggregate form and is treated like a technical cookie. They do not require your consent (art. 122 of the Italian Privacy Code and the guidelines of the Italian Data Protection Authority of 10 June 2021). That is why there is no cookie banner. We do not use profiling or advertising cookies.

What is a cookie?

A cookie is a small text file that a website stores in the browser of your computer, phone or tablet. It lets the site remember information about your visit, such as the language you chose, and makes your next visit easier. Session cookies are deleted when you close the browser; persistent cookies remain for a set period.

Cookies used on this website

  • pll_language (fraivolti.it): remembers the language you chose, English or Italian. Technical, lasts 1 year.
  • wordpress_* and wp-settings-* (fraivolti.it): set only when the site administrator logs in; visitors never receive them.
  • Visit statistics (fraivolti.it): we count visits with Koko Analytics, which runs on our own server. It uses one cookie, _koko_analytics_pages_viewed, which only records which pages have been viewed that day, so that the same visit is not counted twice; it expires at midnight. No personal data is stored, and the statistics are aggregated and never shared.
  • Beds24 booking engine (beds24.com): on the booking page, the calendar and the booking form are provided by Beds24, which may set the technical cookies needed to complete a reservation.
  • Stripe (stripe.com): on the payment page of the booking engine and on the page where you can pay the city tax by card, Stripe sets the technical cookies needed to process the payment securely and prevent fraud.
  • PayPal (paypal.com): if you pay the city tax with PayPal, the payment is completed on the PayPal website, which applies its own privacy and cookie policy.
  • Online check-in draft: not a cookie, but similar. The check-in page saves a draft of the form in your browser’s local storage, so you don’t lose what you typed if the page reloads. The draft stays on your device and is deleted as soon as you send the form.

Third-party services

Apart from the Beds24 booking engine and the Stripe payment form inside it, the site does not embed content from other websites. The links to Google Maps, WhatsApp, Instagram and Facebook take you to those services, which apply their own privacy and cookie policies. Fonts and photos are loaded from our own server, without contacting third parties.

How to manage cookies in your browser

You can allow, block or delete cookies in your browser settings. Instructions for the most common browsers:

If you block technical cookies, some parts of the site may not work, such as the booking engine. Many browsers also let you choose which sites may set cookies, so you can block them everywhere except on the sites you trust.