Privacy Policy

1. Data Controller

The data controller is SD SRL (P.IVA IT04142590654), operating as Casa Vacanze Eco del Mare, located at Corso Carlo Pisacane 121, 84051 Palinuro (SA), Italy. For any privacy-related request you may contact us at: info@ecodelmarepalinuro.it.

2. Collected Data

We collect personal data voluntarily provided through contact and quote request forms on this website:

• Full name
• Email address
• Phone number
• Preferred stay dates and accommodation preferences

We also collect technical data automatically, such as IP address, browser type, and pages visited, through server logs and analytics cookies (see our Cookie Policy).

3. Legal Basis for Processing (Art. 6 GDPR)

Your personal data is processed based on the following legal grounds:

• Consent: when you fill out the contact or quote form and check the privacy acceptance box.
• Contractual necessity: to manage and fulfil your booking request.
• Legal obligation: to comply with fiscal and administrative regulations.
• Legitimate interest: to improve our services and prevent fraud.

4. Purpose of Processing

Your data is used exclusively for the following purposes:

• Responding to requests for information and quotes.
• Managing bookings and stays.
• Sending booking confirmations and related communications.
• Fulfilling legal and tax obligations.

5. Data Sharing and Transfers

Your personal data will not be sold to third parties. Data may be shared with:

• Service providers necessary for delivering the requested service (e.g. payment processors, hosting providers).
• Public authorities when required by law.

Data is not transferred outside the European Economic Area (EEA). If external services (e.g. Google Maps) process data outside the EEA, they do so under adequate safeguards (e.g. EU Standard Contractual Clauses).

6. Data Retention

Personal data from contact requests is retained for a maximum of 24 months from the last interaction, unless a longer retention period is required by law (e.g. tax records: 10 years). Booking-related data is retained for the legally required period.

7. Your Rights (Articles 15–22 GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15): obtain a copy of your personal data.
• Right to rectification (Art. 16): correct inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your data when no longer necessary.
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20): receive your data in a structured format.
• Right to object (Art. 21): object to processing based on legitimate interest.
• Right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, send an email to info@ecodelmarepalinuro.it. We will respond within 30 days.

8. Supervisory Authority

If you believe your rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.