Privacy
Policy

Data Controller

The Data Controller is Sorelle Carboni S.r.l., based at via del Belvedere n. 24, Tonara (NU). Contact: info@sorellecarbonitonara.it · +39 347 3635871.

Types of Data Collected

As part of our relationship with guests and website visitors, we process the following categories of data:

• Contact data: first name, last name, email address, phone number, voluntarily provided through the stay request form or through direct correspondence.
• Booking data: check-in and check-out dates, number of guests, stay preferences, any notes.
• Identity data: a copy or details of your identity document, requested at check-in pursuant to Article 109 of the TULPS for reporting to the public security authorities.
• Browsing data: technical information automatically collected by the systems hosting the site (IP addresses, browser type, pages visited) for aggregate statistical purposes.

Purposes & Legal Basis

1. Managing the request and the stay: legal basis, performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).
2. Legal obligations (guest reporting to the authorities, invoicing, tax obligations): legal basis, legal obligation (Article 6(1)(c) GDPR).
3. Responding to information requests received by email, phone or form: legal basis, legitimate interest and consent of the data subject.
4. Protection of legal rights: legal basis, legitimate interest of the Controller (Article 6(1)(f) GDPR).

Recipients of the Data

Data may be shared exclusively with:

• Authorized staff of the property, duly trained.
• Public security authorities (Questura) pursuant to Article 109 of the TULPS, limited to guest data.
• Accounting and tax consultants, within the limits of legal obligations.
• Technical website providers (hosting, email delivery services via FormSubmit.co) acting as Data Processors.

Data is not transferred outside the European Economic Area, except where necessary for the provision of technical services, in compliance with the safeguards set out in Articles 44 et seq. of the GDPR.

Retention

• Booking and contact data: for the time necessary to perform the contract and in any case no longer than 24 months from the last contact.
• Tax data: 10 years, as required by law.
• Data transmitted to the public security authorities: as provided by law.

Rights of the Data Subject

You may exercise, at any time, the rights recognized under Articles 15 to 22 of the GDPR:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of data ("right to be forgotten").
• Restriction of or objection to processing.
• Data portability.
• Withdrawal of consent at any time (withdrawal does not affect the lawfulness of processing carried out before it).
• Lodging a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

To exercise your rights, write to us at info@sorellecarbonitonara.it.

Cookies

The site uses exclusively technical and session cookies that are strictly necessary for its operation. No profiling or advertising tracking cookies are used. For more details, please refer to the Cookie Policy available in the site's footer.

Changes to This Notice

This notice may be updated to reflect regulatory changes or organizational changes. The current version is always available on this page, with an indication of the date of the last update.