Privacy notice

Data controller

The data controller is Alessandro Cozzi. Property address: Via Sassari 4, 07039 Valledoria (SS), Italy. For requests concerning personal data: reservations@seaandsoulsardinia.com.

Data, purposes and legal bases

Name, email address, telephone number, guest and stay details, service choices, accepted terms and payment-status information are processed for quotations, bookings, assistance, payments and administrative obligations. The legal bases are pre-contractual measures, performance of the contract, legal obligations and, for security and the protection of rights, the controller’s legitimate interest.

The website does not receive full payment-card details: payments are handled by Stripe. Guest identification documents may be requested to meet identification and reporting obligations required by law.

Offers and promotions

Promotional communications are sent only to people who select the dedicated optional checkbox. We retain email address, name, any telephone number, language, date, source, version and wording of consent. Refusing consent does not prevent a booking.

Withdrawal of consent

Consent may be withdrawn at any time using the link in each message or by writing to the address above. After withdrawal, the contact will no longer be used for promotional purposes.

Recipients and services used

To the extent necessary, data may be processed by technical hosting and security providers, Zoho for email and Stripe for payments, as well as advisers and public authorities when required by law. Booking, Airbnb and Google receive data only when you directly use their services or links. Providers operate according to their respective roles and privacy agreements.

Transfers outside the European Economic Area

Some international providers may process data in countries outside the EEA. In such cases, transfers rely on an adequacy decision or safeguards recognised by the GDPR, such as standard contractual clauses, as described in each provider’s notice.

Analytics and cookies

Optional analytics start only after consent and concern the page, country, device, source and booking journey, without storing IP addresses in the analytics database. Further details are provided in the cookie policy.

Retention periods

Booking and administrative data are retained for the duration of the relationship and the subsequent applicable tax and civil-law periods, normally up to 10 years. Uncompleted enquiries are retained for up to 12 months; marketing consents until withdrawal or, without interaction, for 24 months; analytics for around 13 months; and security logs for up to 12 months, unless investigation or legal protection requires longer retention.

Minors

A booking must be made by an adult. Minors’ data are processed only when necessary for the stay and legal obligations, under the responsibility of the person exercising parental responsibility.

Rights and complaints

You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent without affecting earlier processing. The controller does not make decisions based solely on automated processing. You may also lodge a complaint with the Italian Data Protection Authority.