Privacy and Cookie Policy

This page explains which personal data www.costablubb.com collects, why, and what your rights are.

Who is responsible for your data

The data controller is Costa Blu di Sicignano Sebastiano, via Principe di Piemonte 45, 80051 Agerola (NA), Italia.

Contact: info@costablubb.com · +39 333 23 66 226

What data we collect

Your phone number, if you call us or give it to us.
What you write to us by email or WhatsApp, together with your contact details.
The details you enter when you book through the booking engine (name, contact details, dates, payment information).
Technical data collected automatically when you visit the site (usage data), such as IP address, browser, operating system, date and time of the visit and pages viewed.

If a piece of data is needed to answer you or to complete a booking and you do not provide it, we may not be able to do so.

Why we use it and on what legal basis

To answer your questions and requests for information (steps taken at your request before a booking, or our legitimate interest in replying to you).
To manage your booking and stay (performance of the contract).
To contact you by phone about your request or booking and, occasionally, about offers from Costa Blu (our legitimate interest; you can object at any time).
To comply with legal obligations, for example tax obligations.
To keep the site running and secure, and to protect our rights in case of disputes (our legitimate interest).

Services that process data on our behalf

Krossbooking – booking engine and channel manager: it shows room availability and receives the bookings made on this site, which it handles on our behalf.
WhatsApp Business (Meta Platforms Ireland Limited, Ireland) – to reply to the messages you send us.
Netlify (Netlify, Inc., United States) – hosts the website and records technical data about visits.

Your data may also be handled by our email provider and by technical or administrative consultants, only as far as necessary.

Where your data is processed

Data is processed in Italy and wherever the services listed above are located. Some of them, such as Netlify, may store data outside the European Union, for example in the United States: in that case the transfer takes place with the safeguards required by the GDPR.

How long we keep it

We keep data only for as long as it is needed for the purpose for which it was collected: booking data until the stay is complete, and longer only where the law requires it (for example for tax purposes). Data processed on the basis of our legitimate interest is kept until that interest has been satisfied. After that, it is deleted.

Your rights

Under the EU General Data Protection Regulation (GDPR) you can:

withdraw your consent at any time, where processing is based on consent;
object to processing based on our legitimate interest, and always to direct marketing, free of charge and without giving a reason;
access your data and receive a copy of it;
have inaccurate data corrected;
ask for processing to be restricted;
ask for your data to be deleted;
receive your data in a common digital format or have it sent to another controller;
lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of your country.

To exercise your rights, write to info@costablubb.com · +39 333 23 66 226. It is free and we will reply as soon as possible, and in any case within one month.

Changes to this policy

We may update this page when the law or the services we use change. The date of the last update is shown at the bottom.

Last updated: 28 October 2026