Privacy policy

PRIVACY POLICY

This information is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and describes how personal data of users who browse and use the Smart Holiday Sorrento website is processed.

1. Data Controller

The data controller is Smart Holiday Sorrento, reachable at the email address: [email protected]

2. Types of data collected

During browsing and use of the website, the following personal data may be collected:

Identification data (first name, last name)
Contact data (email, phone number)
Booking data (stay dates, number of guests, preferences)
Payment data (e.g. credit card provided as a guarantee through secure payment systems)
Browsing data (IP address, device information, cookies)
3. Purpose of processing

Personal data is processed for the following purposes:

Management of information requests and bookings
Confirmation and management of the stay
Fulfillment of contractual and legal obligations
Communications related to the booking (before, during and after the stay)
Improvement of services and user experience
Fiscal and administrative obligations
4. Legal basis of processing

The processing of data is based on:

Performance of a contract (booking and stay)
Legal obligations (e.g. communication to competent authorities)
Legitimate interest of the controller (management and improvement of services)
User consent, where required (e.g. promotional communications)
5. Processing methods and security

Personal data is processed using IT and/or paper tools, in compliance with the principles of lawfulness, fairness and transparency.
Appropriate security measures are adopted to protect data from unauthorized access, loss, destruction or disclosure.

6. Data retention

Personal data will be retained for the time strictly necessary for the purposes for which it was collected, and in any case in compliance with applicable legal obligations.

7. Data sharing

Personal data may be shared with:

Technical service providers (e.g. booking engine, payment systems)
Administrative and tax consultants
Competent authorities, where required by law

Data will not be disclosed to third parties for commercial purposes without the user’s consent.

8. Data subject rights

The user has the right to:

Access their personal data
Request rectification or deletion
Restrict or object to processing
Request data portability
Withdraw consent at any time

Requests can be sent to the email address indicated above.

9. Cookies

The website uses technical cookies and, subject to consent, profiling and third-party cookies.
For more information, please refer to the Cookie Policy.

10. Changes to this policy

This Privacy Policy may be subject to updates. Users are invited to consult it periodically.