Privacy & Cookie Policy
Last updated: 2026-09-21
This notice is provided pursuant to Regulation (EU) 2016/679 ("GDPR"). It explains how we process personal data through this website and how we manage cookies and third‑party services (e.g., Google Maps).
1. Types of data processed
- Data sent via forms: full name, email, phone (optional), arrival/departure dates, adults, children, message.
- Data sent voluntarily by email or WhatsApp: identification and contact details and any other information freely included in the message.
- Technical data: system logs, IP address, user agent, device information for security and operation.
- Storage technologies and third-party services: browser local storage (localStorage) to remember the choice relating to Google Maps; any Google Maps cookies or similar technologies are activated only after consent.
2. Required and optional data
Providing your full name, email address, stay dates and number of adults is necessary to handle an availability request. If these data are not provided, the request cannot be sent or handled. The phone number, number of children and message are optional.
3. Purposes and legal bases
- Managing availability/contact requests received through the form, email or WhatsApp → performance of pre‑contractual or contractual measures (Art. 6(1)(b) GDPR).
- Security, abuse prevention and maintenance → legitimate interest of the Controller (Art. 6(1)(f) GDPR).
- Legal/tax obligations → legal obligation (Art. 6(1)(c) GDPR).
- Third‑party functionality (Google Maps) → user consent (Art. 6(1)(a) GDPR).
4. Processing methods
Data is processed using electronic and paper tools, according to the principles of lawfulness, fairness, transparency and minimization, with appropriate security measures.
The website does not carry out profiling or make decisions based solely on automated processing.
5. Recipients and transfers
Data may be processed by providers that supply technical or organizational services (hosting, maintenance, form handling), acting as data processors where applicable. Data is not made public and may be disclosed to competent authorities where required by law. Where data may be transferred outside the European Economic Area (EEA), the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCC), where applicable, or other appropriate safeguards under Arts. 44 et seq. GDPR are used.
6. Retention periods
- Requests received through the form, email or WhatsApp: up to 12 months from closing the request.
- Technical security logs: up to 6 months, unless further investigation is required.
- Tax/accounting documentation: up to 10 years.
- Preference relating to third-party services: stored in the browser's local storage (localStorage) for 180 days to remember the choice concerning the activation of Google Maps.
7. Cookies and third‑party services
This site uses browser local storage (localStorage) to remember the choice relating to third-party services for 180 days. It does not set first-party cookies. Google Maps is activated only after your consent via the banner or the dedicated button in the map section.
Third-party services and data transfers
| Service | Provider | Purpose | Legal basis | Duration | Place of processing | Privacy |
|---|---|---|---|---|---|---|
| Google Maps (interactive map) | Google LLC | Show location on map | Consent (Art. 6(1)(a)) | Variable (see Google policy) | Possible transfers outside the EEA (DPF and/or SCC, where applicable) | Privacy |
| Netlify Forms | Netlify, Inc. | Manage form submissions | Art. 6(1)(b) / 6(1)(c) | See policy | Possible transfers outside the EEA (DPF and/or SCC, where applicable) | Privacy |
8. Data subject rights
You may exercise your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to venerdihouse@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority.
9. Managing/revoking consent
You can modify or revoke your preference relating to third-party services at any time by clicking on “Cookie settings” in the site footer. If consent is withdrawn, third‑party content (e.g., the Google map) will be disabled until you provide consent again.
10. Changes to this notice
The Controller reserves the right to update this notice. Changes will be published on this page.
11. Controller
The Controller is F. Vesigna, located at Via Pasquale Paoli, 103 – 07041 Alghero (SS), Italy. Email: venerdihouse@gmail.com.