PRIVACY POLICY AND DATA PROCESSING (GDPR)
The Data Controller is Sardegna Sunshine, based in Magomadas (OR). Contact email: info@sardegnasunshine.com.
Types of Data Collected and Purpose
We collect and process guests' personal data exclusively for the following purposes:
- Booking Management: First name, last name, email, phone number, and stay dates, required to confirm the booking and communicate with the guest.
- Public Safety Compliance (Guest Reporting): Identification document data of guests, collected as a mandatory requirement under Art. 109 of the TULPS (Italian Consolidated Law on Public Safety) and transmitted electronically within 24 hours of arrival to the State Police "Alloggiati Web" portal.
- Statistical Compliance (ISTAT): Data relating to the origin and number of guests, transmitted at a regional level for mandatory tourism statistical surveys.
- Tax Compliance: Tax Code (Codice Fiscale), VAT number (if applicable), and residential address for issuing tax receipts or electronic invoices
3. Payment Data and Security (Stripe)
Credit card and electronic payment data are neither stored nor managed directly by us. Payments are processed securely and in an encrypted format through the external payment gateway Stripe, integrated into the booking platform. Stripe operates in full compliance with international financial and cybersecurity standards (PCI-DSS).
4. Data Sharing with Third Parties
Data Sharing with Third Parties
Data will never be sold or transferred to third parties for commercial purposes. To provide the service and fulfill legal obligations, data is processed through:
- Competent authorities (Public Safety and ISTAT offices).
- The AvaiBook management platform and channel manager.
- The Stripe payment network.
All third-party providers operate in full compliance with the European General Data Protection Regulation (GDPR).
5. Data Retention and Guest Rights
Data related to safety and taxes is retained for the minimum periods established by respective Italian laws (e.g., 10 years for tax documents). Users may exercise their right to request access, verification, or modification of their data at any time by writing to info@sardegnasunshine.com
