Privacy notice

1. Data controller

The data controller is Enza Tacus, private lessor of La Casa di Santino, CIN IT111063C2000U5428, in San Giovanni Suergiu (Sardinia, Italy).

You may contact the controller by email or phone for information about processing or to exercise the rights listed below. No Data Protection Officer has been appointed because the legal conditions for appointment do not currently apply.

2. Data processed and its source

Browsing data. When you visit the website, technical systems process the data needed for transmission and security, including IP address, date and time, requested resource, browser and device information, and technical network and security data.

Contact data. If you choose to contact us by email or phone, we process your contact details, the content of your message and any information you provide for an availability request or to prepare a booking.

The website has no contact form, requires no account and collects no payment data.

3. Purposes and legal bases

• Delivering, protecting and diagnosing the website: legitimate interest in providing a secure and functioning service (Article 6(1)(f) GDPR).
• Answering availability and information requests and taking pre-contractual steps: Article 6(1)(b) GDPR.
• Complying with legal obligations connected with a later booking or rental: Article 6(1)(c) GDPR. Additional information may be provided for those further processing activities.

4. Cookies and technical tools

The website uses no analytics, advertising or profiling cookies and stores no preferences in browser localStorage or sessionStorage. For this reason, no consent banner is displayed.

Cloudflare may use strictly necessary technical cookies when security checks, bot protection or network failures require them. Cloudflare also provides the content delivery network and email address protection. Network Error Logging (NEL) is disabled for this domain. La Casa di Santino does not use these tools for profiling or advertising.

Technical information from the providers: Cloudflare cookies, Cloudflare privacy, GitHub privacy.

5. Recipients and transfers

Where necessary, data may be processed by GitHub Pages (hosting), Cloudflare (CDN, security and technical network services) and Fastweb (email service). Data may also be disclosed to professional advisers or public authorities where required by law.

Providers act as processors or according to the privacy role applicable to each service. Personal data is not sold or disclosed for advertising purposes.

Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision or appropriate safeguards under Chapter V GDPR, such as standard contractual clauses.

6. Retention periods

• Enquiries that do not lead to a booking: no longer than 12 months after the last relevant contact, unless a dispute or legal obligation requires longer retention.
• Data relating to a booking or rental: for the periods required by applicable civil, tax, administrative and public-security rules.
• Technical data and logs: for the time needed for delivery, diagnostics and security, according to provider settings and contractual terms; evidence needed for a security incident may be kept longer.

7. Your rights

Where the legal conditions apply, you may request access, correction, deletion, restriction, portability and object to processing based on legitimate interests. Any consent may be withdrawn at any time for the future.

To exercise your rights, contact the controller using the details below. You may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in your country of residence.

8. Optional provision and automated decisions

Contacting us is optional. Without a reachable contact detail and the information needed for the request, however, we cannot reply or take pre-contractual steps.

No automated decision-making or profiling takes place.

9. Scope and updates

This notice covers the website and the first direct contact. If a booking is confirmed, additional information may be provided about legal reporting and contractual documents.

This notice will be updated when services, providers or processing activities change. The latest update date appears above.