Privacy policy

The controller is Rita Corronca, Villa Marea, Residence Abba Urci, Marina di Tertenia, Ogliastra, Sardinia. Email: —. Phone: —.

For any request about your data, please write to the email address above.

Data you give us in the inquiry form: name, email, phone (optional), request type, stay dates, number of guests and your message.

Quote data, if we send you an offer: name, dates, number of guests and amounts.

Technical data generated by the server to run and protect the site (IP address, timestamp, requested page, browser type), kept in technical logs for a limited time.

Article sharing statistics: we record only the article and the channel chosen (e.g. WhatsApp, Facebook) — no name, email, IP or anything that identifies you.

Answering availability, quote or information requests: pre-contractual steps taken at your request (Art. 6.1.b GDPR).

Managing a booking and its payments, if confirmed: performance of the contract (Art. 6.1.b) and legal, tax and accounting obligations (Art. 6.1.c).

Security and technical operation of the site: our legitimate interest (Art. 6.1.f).

Anonymous sharing statistics: no personal data is involved.

We ask only for what we need to reply: name and email are required, phone is optional. Without name and email we cannot answer.

We do not ask for special category data (health, opinions and similar): please do not include it in the free-text message.

Inquiries that do not lead to a booking: kept for up to 24 months, then deleted automatically by a scheduled server task.

Quotes and confirmed bookings: kept as long as needed to manage the stay and, for accounting and tax documents, for 10 years as required by law.

Server technical logs: may be kept for the limited period needed for security, maintenance and infrastructure management, according to the applicable infrastructure providers' policies.

Data is handled by the controller and the authorised people who manage bookings.

Technical suppliers acting as processors: the hosting and database provider of this site (cloud infrastructure with servers in the European Union, AWS region eu-west-1, Ireland) and, when active, the email service used to forward inquiries.

Inquiries sent from the site are always stored in the site's own database; when the owner has set a recipient address and the email service is active, a copy is forwarded to that address.

To check availability, the server makes a read-only request to the iCal address of the calendar configured by the owner (usually Google Calendar). It is used solely to synchronise booked dates: no personal data entered in the inquiry form is ever sent to that calendar.

We never sell or share your data with third parties for marketing.

The site infrastructure is configured on servers in the European Union. If a supplier processes data outside the EU, the transfer relies on GDPR safeguards (adequacy decision or standard contractual clauses).

When you open links to Google Maps, WhatsApp or social networks you leave this site: from that moment the privacy notice of that service applies.

The site is served only over encrypted HTTPS. Inquiry data is stored in a database with restricted access: only the owner's authenticated account can read it.

The owner area is not indexed by search engines and is not accessible to unauthorised accounts.

You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR), and the right to withdraw consent at any time where consent applies.

To exercise them, write to — describing your request: we reply within one month.

If you believe the processing is unlawful you may complain to the Italian Data Protection Authority (www.garanteprivacy.it) or go to court.

We do not carry out profiling or automated decision-making.

For cookies and similar tools, see the Cookie Policy of this site.