Data controller
The Controller is: Mediterranea Domus, with registered office at via Campidoglio n. 16 - 91030 San Vito Lo Capo (TP), CPP NRG 59A22 L331X. Privacy contacts: e-mail info@mediterraneadomus.com, telephone: +39 347 892 2971.
This policy describes how we process the personal data of those who browse this site and contact us for information, quotes or bookings (Arts. 13 and 14 of Regulation (EU) 2016/679, “GDPR”, and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018). It does not cover third-party sites reached through links.
What data we process
- Browsing data: IP address, browser type and operating system, date and time, pages viewed, outcome of requests. They are used only for the operation and security of the site and for anonymous statistics, and are not kept for more than seven days.
- Data you provide voluntarily through forms, WhatsApp, telephone or e-mail: first name, surname, city, telephone, e-mail, dates of stay, number of guests, property of interest, any notes and requests.
- Data required for the stay, collected on arrival and not through the site: guests’ personal and identity document details, required by law (communication to the public security authorities and tourist tax)
We do not ask for or process special categories of data (Art. 9 GDPR): please do not enter them in the notes.
Purposes and legal bases
- Replying to your requests for information, availability and quotes: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b)).
- Managing the booking and the stay, including deposit and operational communications: performance of the contract (Art. 6(1)(b)).
- Complying with legal obligations: tax and accounting, tourist tax, public security (Art. 6(1)(c)).
- Site security, prevention of abuse and protection of the Controller’s rights: legitimate interest (Art. 6(1)(f)).
- Commercial communications and offers about our stays: only with your optional consent, which may be withdrawn at any time (Art. 6(1)(a)). Refusing consent does not affect your ability to request a quote or book.
Nature of data provision
Providing the data marked as mandatory in the forms is necessary to reply to the request or complete the booking; without them we will not be able to follow up. Providing data for commercial purposes is always optional.
Forms and WhatsApp
The forms on the site do not send data to a server of ours: when you fill them in, WhatsApp opens with a message already written, which you can check before sending. The data reach us only if you choose to send the message. The processing carried out by WhatsApp (Meta) is independent and governed by its own privacy notice; we process the messages we receive as described in this policy.
Cookies and third-party tools
This site uses only technical cookies necessary for its operation and does not use profiling cookies.
Who we share data with
The data are not disseminated. They may be disclosed, only where necessary, to:
- technical service providers (hosting, maintenance, e-mail), appointed as data processors (Art. 28 GDPR);
- tax and accounting advisers and banks, for the formalities connected with payment and bookkeeping;
- public authorities and bodies, where required by law (e.g. public security, the Municipality for the tourist tax).
How long we keep data
- Browsing data: no more than seven days.
- Enquiries not followed by a booking: 12 months from the request.
- Contract data and tax and accounting records: for the period required by law (generally 10 years).
- Data for commercial purposes: until consent is withdrawn or for 24 months from the last contact.
At the end of this period the data are deleted or anonymised.
Methods and security
Processing takes place with IT and/or paper tools, with technical and organisational measures appropriate to prevent unauthorised access, loss, unlawful use or disclosure of the data. No automated decision-making or profiling is carried out.
Your rights
You have the right to obtain from the Controller, in the cases provided for by Arts. 15-22 of Regulation (EU) 2016/679 (GDPR): access to your data and confirmation that they are being processed; rectification or completion; erasure (“right to be forgotten”); restriction of processing; data portability; objection to processing based on legitimate interest or carried out for direct marketing purposes.
You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before withdrawal (Art. 7(3) GDPR). You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).
To exercise your rights write to info@mediterraneadomus.com or to the Controller’s registered office. We will reply within one month of the request, which may be extended in particularly complex cases (Art. 12 GDPR).
Changes to this policy
This policy may be updated; the version in force is the one published on this page. Last updated: 4 November 2026.
