Privacy Policy
Last updated: 20/10/2026
Effective date: 20/10/2026
Applicable regulation: GDPR (EU) 2016/679
1. Data Controller
Apartments in Sicily S.r.l.s.
Registered office: Viale del Fante 58/A, 90146 Palermo
Operating office: Via Bandiera 11, 90133 Palermo
VAT no.: 07447190823
Email: apartmentsinsicily.it@gmail.com
Phone: +39 334 276 2077
The Data Controller is responsible for protecting your personal data and implementing appropriate security measures.
2. Personal Data Collected
During your visit and use of our services, we may collect the following types of personal data:
Data provided voluntarily
- First and last name
- Email address
- Phone number
- Contact message
- Communication preferences
Data collected automatically
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Approximate geolocation data
- Cookies and similar technologies
3. Purposes of Processing
Your personal data is processed for the following purposes:
Primary Purposes
Legal basis: Legitimate interest
- Handling information requests
- Providing the requested services
- Communications relating to bookings
- Website security
Secondary Purposes
Legal basis: Consent
- Statistical analysis and service improvement
- Promotional communications
- Personalisation of the user experience
- Marketing and remarketing
4. Legal Basis for Processing
| Purpose | GDPR Legal Basis |
|---|---|
| Handling requests and communications | Art. 6(1)(f) - Legitimate interest |
| Website security and operation | Art. 6(1)(f) - Legitimate interest |
| Statistical analysis | Art. 6(1)(a) - Consent |
| Marketing and promotional communications | Art. 6(1)(a) - Consent |
5. Data Sharing
Your personal data may be shared with:
Partners and Service Providers
- Vercel: Website hosting and infrastructure
- Supabase: Database for bookings, enquiries and site content
- Stripe: Online payment processing for bookings
- Google (Gmail): Delivery of service emails and of the enquiries sent through our forms
- Google Analytics: Website usage statistics, only with your consent to analytics cookies
- Google Ads: Conversion measurement and remarketing, only with your consent to marketing cookies
- OpenStreetMap: Interactive map display
Transfers outside the European Union
Some of these providers are based, or keep servers, in the United States. Where that is the case the transfer relies on the safeguards set out in Articles 44 ff. GDPR — standard contractual clauses or certification under the EU-US Data Privacy Framework. The analytics and marketing services receive no data at all until you give the relevant consent.
We never share
- Data for commercial purposes unrelated to our services
- Personal information for spam or unauthorised marketing purposes
- Sensitive data without your explicit consent
6. Data Retention
Your personal data is retained for the time strictly necessary for the purposes for which it was collected:
- Contact data: 3 years from the last contact
- Browsing data: 14 months for events in Google Analytics; analytics cookies expire within 24 months
- Cookie consents: 12 months from collection
- Security logs: 12 months to ensure website security
7. Your GDPR Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15)
Request information about the data we process about you
Right to Rectification (Art. 16)
Correct inaccurate or incomplete data
Right to Erasure (Art. 17)
Request the deletion of your data
Right to Restriction (Art. 18)
Restrict processing in specific circumstances
Right to Data Portability (Art. 20)
Receive your data in a structured format
Right to Object (Art. 21)
Object to processing based on legitimate interest
Withdrawal of Consent (Art. 7)
Withdraw consent at any time
Right to Lodge a Complaint (Art. 77)
Lodge a complaint with the Data Protection Authority
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
Encryption
HTTPS connection and encryption of sensitive data
Access Control
Data access restricted to authorised personnel only
Monitoring
Continuous monitoring to detect unauthorised access
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. For detailed information, please see our dedicated Cookie Policy.
10. Privacy Contacts
To exercise your rights, ask questions about privacy, or report issues relating to data processing:
Email: apartmentsinsicily.it@gmail.com
Phone: +39 334 276 2077
Address: Via Bandiera 11, 90133 Palermo, Sicilia
Response time: We will respond within 30 days of receiving your request, as provided for by the GDPR.
11. Changes to this Privacy Policy
This privacy policy may be updated periodically. We will inform you of any material changes through:
- A prominent notice on the website
- Email to registered users (where applicable)
- Updating the "last updated" date at the top of the page
We invite you to periodically review this policy to stay up to date with our privacy practices.
This policy complies with the European Union's General Data Protection Regulation (GDPR) and Italian privacy law.
Back to Home