Privacy Policy - Casa Sciacca

This privacy policy describes how Casa Sciacca ("we", "us", "our") collects, uses, and shares the personal data of visitors to our website (https://www.casa-sciacca.it/, if applicable) and guests staying at our vacation home located at SS115, Contrada Cuore di Gesu', 967, 91025 Marsala, Marsala, Italy.

1. Data Controller

The data controller is Vincenzo Sciacca, residing at Contrada Cuore di Gesù, 937, 91025, Marsala, Italy. You can contact us with any privacy-related questions at the email address info@casa-sciacca.it or the phone number +3903383586529.

2. Personal Data Collected

We may collect the following types of personal data:

• Identification Data: Name, surname, address, phone number, email address, date of birth, identity document (where required to comply with legal obligations).
• Reservation Data: Dates of stay, number of guests, preferences (e.g., bed type, special needs).
• Payment Data: Credit card information or other payment methods (processed securely by our payment service providers).
• Communication Data: Correspondence via email, messages, or phone calls.
• Website Usage Data (if applicable): IP address, browser type, pages visited, access time (collected through cookies and similar technologies – see our separate Cookie Policy, if applicable).
• Data Provided During the Stay: Any feedback, requests, or information provided during the stay.

3. Purposes of Data Processing

We use your personal data for the following purposes:

• Reservation Management: Processing and confirming your reservations, sending communications related to the stay.
• Provision of Hospitality Services: Ensuring a comfortable and safe stay, responding to your requests and needs.
• Fulfillment of Legal Obligations: Registering guests as required by local regulations, managing invoicing and payments.
• Marketing Communications (only with your consent): Sending you promotional emails or messages about special offers or updates related to our vacation home. You can revoke your consent at any time.
• Improving Our Services: Analyzing data to understand guest preferences and improve our offerings.
• Security: Ensuring the security of our property and guests.

4. Legal Basis of Processing

The processing of your personal data is based on one or more of the following legal bases:

• Performance of a Contract: The processing is necessary to fulfill the contractual obligations related to your reservation and your stay.
• Legal Obligations: The processing is necessary to comply with the legal obligations to which we are subject (e.g., guest registration).
• Consent: You have given your consent to the processing of your personal data for specific purposes (e.g., marketing).
• Legitimate Interest: The processing is necessary to pursue our legitimate interest (e.g., improving our services), provided that your interests or fundamental rights do not prevail.

5. Data Processing Methods

Your personal data is processed with manual and electronic tools, with logic strictly related to the purposes indicated and, in any case, in order to guarantee the security and confidentiality of the data.

6. Data Retention

We retain your personal data for the period necessary to achieve the purposes for which it was collected and in accordance with applicable legal obligations. In general, data relating to reservations is kept for 5 years to comply with tax and administrative obligations. Data for marketing purposes is kept until you revoke your consent.

7. Data Sharing

Your personal data may be disclosed to:

• Service Providers: Third parties that provide us with support services (e.g., online booking management, payment services, website maintenance). These providers act as data processors and are bound to protect your data.
• Public Authorities: Public bodies or competent authorities to comply with legal obligations or to respond to legitimate requests.
• Authorized Personnel: Our employees or collaborators authorized to process data for the purposes indicated above.

We will not transfer your personal data outside the European Economic Area (EEA) without adequate safeguards.

8. Your Rights

As a data subject, you have the following rights:

• Right of Access: Obtain confirmation as to whether or not personal data concerning you is being processed, and, if so, receive information relating to the processing.
• Right to Rectification: Obtain the rectification of inaccurate personal data concerning you and the integration of incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Obtain the erasure of personal data concerning you, if there are grounds provided for in the GDPR.
• Right to Restriction of Processing: Obtain the restriction of the processing of your personal data, if there are grounds provided for in the GDPR.
• Right to Data Portability: Receive, in a structured, commonly used and machine-readable format, the personal data concerning you and transmit it to another data controller, where applicable.
• Right to Object: Object at any time to the processing of your personal data for legitimate reasons or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent to the processing of your personal data at any time, without prejudice to the lawfulness of the processing based on consent given before its withdrawal.
• Right to Lodge a Complaint with the Supervisory Authority: You have the right to lodge a complaint with the Italian Data Protection Authority if you believe that the processing of your personal data violates the current legislation.

9. Cookies (if applicable)

If our website uses cookies, please refer to our separate Cookie Policy for detailed information on the types of cookies used, their purposes, and how to manage them.

10. Updates to this Privacy Policy

We may update this privacy policy periodically to reflect changes in our data processing practices or regulatory changes. Please consult this page regularly to view the latest version.

Date of last update: 13/05/2025

Thank you for choosing Casa Sciacca. We are committed to protecting your privacy and ensuring the security of your personal data.