Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Who processes your data
The data controller is Roberta Currenti.
For any matter concerning your personal data you may write to vacanza.marsala888@gmail.com or call +39 320 783 1895.
No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one do not apply.
2. What data we collect
If you write to us through the website
The contact form collects name, email address, subject and message — the minimum needed to reply to you.
If you book a stay
The booking form collects first name, last name, email address, telephone number, arrival and departure dates and any notes you choose to add. At check-in we also collect the identity document details of everyone staying, because Italian law requires us to report them to the public security authorities.
When you simply visit the website
Our servers automatically record IP address, date and time of the visit, browser type and pages viewed. These are the ordinary technical logs every website produces, used to keep the site running and secure.
The site uses a single cookie, pll_language, which remembers the language you are browsing in. It is a technical cookie and does not require your consent. The site uses no analytics, advertising or profiling tools.
3. Why we process it and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your enquiries | Pre-contractual measures at your request (Art. 6.1.b GDPR) | 12 months from last contact |
| Managing your booking and stay | Performance of a contract (Art. 6.1.b GDPR) | 10 years (tax and accounting obligations) |
| Reporting guests to the Police Headquarters | Legal obligation (Art. 6.1.c GDPR – Art. 109 TULPS) | Transmitted within 24 hours of arrival |
| Statistical reporting and tourist tax | Legal obligation (Art. 6.1.c GDPR) | As required by law |
| Tax and accounting compliance | Legal obligation (Art. 6.1.c GDPR) | 10 years |
| Site security and abuse prevention | Legitimate interest (Art. 6.1.f GDPR) | Maximum 12 months |
Providing the data requested in the forms is optional, but without it we cannot answer your enquiry or manage your booking. Providing identity document details at check-in is instead required by law.
4. Who we share your data with
Your data is never sold or transferred to third parties for commercial purposes. It may be shared only with:
- Aruba S.p.A. (VAT 01573850516), our hosting provider, which stores the data on its servers located in Italy as data processor
- Public security authorities, through the Alloggiati Web portal, to comply with the guest reporting obligation under Article 109 of the Italian TULPS
- The Municipality of Marsala and the Sicilian Region, for statistical reporting and tourist tax where applicable
- Our accountant, for bookkeeping compliance
- Booking platforms Booking.com and Airbnb, limited to bookings received through them. In those cases the platforms act as independent controllers under their own privacy policies, which we invite you to read
Data is stored on servers located within the European Union. No transfer to third countries takes place.
5. Your rights
At any time you may ask us to:
- Access your data and obtain a copy
- Correct inaccurate or incomplete data
- Erase your data, where we are not required by law to keep it
- Restrict processing in certain circumstances
- Receive your data in a machine-readable format, or have it transferred to another party
- Object to processing based on legitimate interest
To exercise these rights, write to vacanza.marsala888@gmail.com. We will reply within one month.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or to take the matter to court.
6. How we protect your data
The site uses an encrypted connection (HTTPS). Booking data is accessible only to the controller through personal credentials. We carry out no automated decision-making and no profiling.
7. Changes to this notice
This notice may be updated, for example if we add new services to the site. The version in force is always the one published on this page.
Last updated: 8 August 2026.