Last updated:
[03/08/2026]
This Privacy Policy describes how the personal data of users visiting www.bbarenalucca.com is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the applicable Italian data protection legislation.

1. Data Controler
   The Data Controller is:
   B&B Arena Lucca
   Via dell’Anfiteatro 16
   55100 Lucca (LU) – Italy
   Email: info@bbarenalucca.com
   Phone: +39 349 7412669
   VAT No.: IT03883490041
   
   2. Types of Personal Data Collected

The Website may collect the following categories of personal data:

• Identification and contact details (such as first name, last name, email address and telephone number);
• Information voluntarily provided through the contact form or when requesting information;
• Data required to manage bookings;
• Information collected when subscribing to the newsletter;
• Technical browsing data and information collected through cookies, in accordance with the preferences expressed by the user.
  
  3. Purposes of Processing

  Your personal data is processed for the following purposes:

• To respond to enquiries submitted through the Website;
• To manage availability requests and bookings;
• To send newsletters, subject to the data subject’s prior consent;
• To comply with legal obligations;
• To improve the functionality of the Website and analyse its use;
• To measure the effectiveness of communication and marketing activities, where required, subject to the user’s prior consent.
  
  4. Legal Basis for Processing
  The processing of personal data is based on one or more of the following legal grounds:

• The performance of pre-contractual measures requested by the data subject;
• The performance of a contract;
• Compliance with legal obligations;
• The data subject’s consent, where required;
• The legitimate interests pursued by the Data Controller, where permitted by applicable law.

5. Methods of Processing

Personal data is processed using electronic and IT-based systems, with appropriate technical and organisational security measures in place to ensure its confidentiality, integrity and availability.

6. Data Recipients

For the purpose of providing the requested services, personal data may be processed by third parties appointed, where applicable, as Data Processors. These may include IT service providers, hosting providers, newsletter delivery platforms, and booking management systems.

7. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and, where applicable, for the period required by applicable legal obligations.

Personal data processed for marketing purposes will be retained until the data subject withdraws their consent.

8. Data Transfers

Some of the service providers used by the Website may process personal data outside the European Economic Area (EEA).

In such cases, personal data is processed in compliance with the safeguards provided for under Articles 44 et seq. of the GDPR.

9. Data Subject Rights

The data subject may exercise, at any time, the rights provided for under Articles 15–22 of the GDPR, including the right to:

• Obtain confirmation as to whether or not their personal data is being processed;
• Access their personal data;
• Request the rectification of inaccurate or incomplete personal data;
• Request the erasure of their personal data;
• Request the restriction of processing;
• Object to the processing of their personal data in the cases provided for by law;
• Request the portability of their personal data;
• Withdraw their consent at any time, where processing is based on consent.

10. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if they believe that the processing of their personal data is carried out in breach of the applicable legislation.

11. Cookies

The Website uses technical cookies and, subject to the user’s consent, analytical and marketing cookies.

For detailed information about the cookies used, their purposes and how to manage your consent, please refer to the Cookie Policy.

12. Changes to this Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time. Any changes will be published on this page, together with the date of the latest update.