Privacy policy
Updated: 21 October 2026
Data controller
Bestabit Holiday Homes di Enrico Borghini
Piazza del Grano 15, Firenze, Italy
info@bestabit.com
What data we process
When you browse, technical data such as your IP address, requested pages, browser information and server logs may be processed. When you book, we process your name, email, telephone number, billing address, tax or company details where required, stay dates, guest numbers and children’s ages. Any message you choose to provide and booking/payment references are also processed. Card details are entered on Stripe’s payment page; BestAbit does not store your full card number or security code.
Purposes and legal bases
We use enquiry and booking data to take steps at your request and perform the accommodation contract (GDPR Article 6(1)(b)); data required for invoicing, tax and applicable guest-registration obligations are processed to comply with law (Article 6(1)(c)). Technical operation, security, fraud prevention and the establishment or defence of claims rely on our legitimate interests (Article 6(1)(f)), balanced against your rights. Required booking fields are necessary to provide the service; without them we cannot complete the online booking. The message field is optional.
Who receives the data
Access is limited to the controller and authorised people assisting with accommodation or administration. Providers involved include Aruba for hosting and related technical services, email providers, Stripe for payments, and accounting advisers or public authorities where required. Providers act under their respective legal roles and applicable agreements. Booking details may be included in service emails to the guest and host. Availability synchronisation and pricing tools use stay dates, calendar availability and price information. Personal data are not published or sold.
External resources and links
Google Fonts supplies the typefaces and flagcdn.com supplies country-flag images in the telephone selector. Loading these resources sends technical connection data, including the IP address, to their providers. Selecting WhatsApp opens an external service; messages sent there are subject to that service’s privacy terms. Continuing to payment opens Stripe Checkout. These external services have their own privacy information, linked below.
International processing
Some international service providers may process data outside the European Economic Area. Their applicable safeguards can include an adequacy decision or European Commission standard contractual clauses. Consult the providers’ transfer information below, including Stripe’s Data Transfers Addendum. You may ask the controller for information about the recipients and safeguards relevant to your data.
How long data are kept
Enquiry and booking data are kept for the time necessary to handle the request, administer the stay and fulfil the related obligations. Billing and tax records are retained for the periods required by applicable law. Data needed to establish or defend a claim may be retained for the applicable limitation period or while a dispute is pending. Technical records are limited according to operational and security needs. These purposes and legal obligations determine the retention period; you may contact us for details about a specific record.
Your rights
Subject to the conditions in the GDPR, you can request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact info@bestabit.com; requests are normally answered within one month, with extensions where permitted by the GDPR. You may complain to the Italian Garante per la protezione dei dati personali or another competent supervisory authority.
Automatic booking functions
The website automatically checks availability, calculates the quoted price and checks payment status to manage the booking. It does not use advertising profiling. If you need clarification or assistance with an automated booking result, contact Enrico at info@bestabit.com.
Google Analytics visit statistics
Only after you accept statistics, we use Google Analytics 4 (Google) to measure visits and pages viewed. Google receives technical connection and browser data and page information. We do not send booking form fields, URL query parameters or advertising identifiers. Advertising features and automatic form tracking are disabled. Analytics cookies (_ga and _ga_*) are configured for a maximum of 180 days, without extending their expiry on each visit. Your accept or reject choice is stored in the browser for 180 days. You can refuse without losing booking functions and change or withdraw consent at any time using Cookie preferences in the footer. Analytics does not load before acceptance; withdrawal stops collection and removes Analytics cookies from this site.
Google Privacy · Google Analytics