Privacy Policy

This Privacy Policy describes how we process the personal data of users who visit the Made in Sicily Santa Tecla website, available at www.madeinsicilysantatecla.it, in accordance with EU Regulation 2016/679 (“GDPR”) and current Italian legislation on the protection of personal data.

1. Data controller

The data controller is:

Made in Sicily Santa Tecla
Via Argenta 10
95024 Santa Tecla, Acireale (CT)
VAT No.: 05943550870
Email: info@madeinsicilysantatecla.it


Telephone: +39 340 900 9388 / +39 347 125 8575

2. Types of data collected

The website may collect the following categories of personal data:

  • personal details, such as first name and surname;
  • contact details, such as your email address and telephone number;
  • data provided voluntarily in contact forms or information request forms;
  • data relating to enquiries about availability, bookings or stays;
  • technical browsing data, such as IP address, browser type, device used and access logs;
  • cookies and similar technologies, as set out in the Cookie Policy.

3. Purposes of the processing

Personal data is processed for the following purposes:

  • to respond to enquiries submitted by the user via the website;
  • handle enquiries, availability checks and bookings;
  • provide assistance before, during and after your stay;
  • to comply with administrative, accounting, tax and legal obligations;
  • to ensure the proper functioning, safety and maintenance of the site;
  • to send promotional communications, offers or newsletters, only with the user’s prior consent.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

  • the performance of pre-contractual or contractual measures requested by the user;
  • compliance with legal obligations;
  • the Data Controller’s legitimate interest in the security, maintenance and improvement of the website;
  • the data subject’s consent, where required, for example for promotional communications or non-technical cookies.

5. Processing methods

Data is processed using IT and telecommunications systems and, where necessary, on paper, in a manner that ensures the security, confidentiality, integrity and availability of personal data.

The Data Controller takes appropriate technical and organisational measures to prevent unauthorised access, loss, disclosure, alteration or destruction of data.

6. Data retention

Personal data is retained for the period strictly necessary to fulfil the purposes for which it was collected.

Specifically:

  • Data relating to contact or information requests are retained for as long as is necessary to process the request;
  • data relating to bookings and stays may be retained for the period specified by tax, accounting and administrative legislation;
  • data processed for marketing purposes is retained until consent is withdrawn;
  • Browsing data is retained for as long as is necessary to ensure the security and proper functioning of the website.

Data subject to administrative, tax or accounting obligations may be retained for up to 10 years, unless otherwise required by law.

7. Disclosure of data to third parties

Personal data may be disclosed to third parties acting on behalf of the Data Controller or providing services necessary for the management of the website and the accommodation business, including:

  • providers of hosting and technical maintenance services;
  • IT service providers;
  • tax, accounting or legal advisers;
  • booking management platforms or tools;
  • public authorities or authorised bodies, in the cases provided for by law.

Personal data will not be made public.

8. Cookies

This website uses technical cookies, which are necessary for the pages to function properly, and, subject to the user’s consent, statistical, analytical or marketing cookies.

Users can manage their cookie preferences as set out in the relevant Cookie Policy.

9. Transfer of data outside the European Union

Personal data is processed mainly within the European Union.

Where certain services used by the website involve the transfer of data to countries outside the EU, such transfers will be carried out in accordance with the safeguards provided for by the GDPR, including adequacy decisions, standard contractual clauses or other appropriate measures provided for by the applicable legislation.

10. Rights of the data subject

As a data subject, you may exercise the rights set out in Articles 15–22 of the GDPR at any time, including:

  • the right of access to personal data;
  • the right to have inaccurate data corrected;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object to processing;
  • the right to data portability;
  • the right to withdraw consent, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Requests may be sent to the Data Controller at the following email address:

info@madeinsicilysantatecla.it

11. Complaint to the supervisory authority

You have the right to lodge a complaint with the Data Protection Authority if you believe that the processing of your personal data is in breach of the applicable legislation.

12. Minors

The website and the services offered are not specifically intended for persons under the age of 18. The Data Controller does not knowingly collect personal data from minors without the consent of their legal guardian.

13. Changes to the Privacy Policy

The Data Controller reserves the right to amend or update this Privacy Policy at any time.

Any changes will be published on this page, along with the date of the update.