⚠️ Draft policy to be validated by a professional advisor before publication. Replace the fields in square brackets with your own details.
Last updated: [DD/MM/YYYY]
This policy describes how the personal data of users who visit the website casevacanzeterrasini.it (and the linked domain terrasinirentals.com) is processed, pursuant to Regulation (EU) 2016/679 (GDPR).
1. Data Controller
[Company name / Owner full name], Via Giuseppe Mazzini 9, 90049 Terrasini (PA), Italy — VAT/Tax code [enter].
Email: info@casevacanzeterrasini.it — Tel: +39 329 563 1620.
2. Personal data processed
- Form data (booking and contact): first name, last name, email, phone number, stay dates, any messages/notes.
- Virtual assistant (AI chat): the content of the messages you write in the chat.
- Browsing data and cookies: IP address, technical device/browser data and statistical data collected through analytics cookies (if you consent).
3. Purposes and legal basis
- Responding to requests and managing the booking — performance of pre-contractual/contractual measures (Art. 6.1.b GDPR).
- Providing the virtual assistant — legitimate interest in offering assistance (Art. 6.1.f) or consent (Art. 6.1.a).
- Statistics and site improvement through analytics cookies — consent (Art. 6.1.a).
- Legal obligations (e.g. tax/administrative) — legal obligation (Art. 6.1.c).
4. Recipients and external processors
The data may be processed, on our behalf, by service providers acting as data processors:
- Aruba S.p.A. — website hosting and email service (EU).
- OpenAI — processing of conversations with the AI assistant (USA).
- Google — browsing statistics (Google Analytics) (USA).
- Meta/WhatsApp — if you contact us via WhatsApp (USA).
- Airbnb / Booking.com — only if you book through these platforms (external channels with their own privacy policies).
The data is neither disclosed nor sold to third parties.
5. Transfers outside the EU
Some providers (OpenAI, Google, Meta) may also process data outside the European Union, in particular in the United States, on the basis of adequate safeguards provided for by the GDPR (Standard Contractual Clauses and/or adherence to the EU-US Data Privacy Framework).
6. Retention period
Data is retained for the time necessary to manage the request/booking and to comply with legal obligations (e.g. tax). AI assistant messages are retained for the technical time needed to provide the service. Afterwards, the data is deleted or anonymised.
7. AI Assistant
The site provides a virtual assistant based on artificial intelligence (provider: OpenAI). Conversations are processed for the sole purpose of answering questions about apartments, services, prices and availability. Do not enter sensitive personal data or payment data in the chat. The assistant does not complete bookings nor handle payments.
8. Cookies
We use technical cookies necessary for the operation of the site and, subject to your consent, analytics cookies (Google Analytics) for aggregate statistics. You can manage or withdraw consent through the cookie banner and your browser settings.
9. Rights of the data subject
You can exercise at any time the rights provided for by Articles 15-22 GDPR: access, rectification, erasure, restriction, objection, portability and withdrawal of consent. To do so, write to info@casevacanzeterrasini.it. You also have the right to lodge a complaint with the supervisory authority (Garante, www.garanteprivacy.it).
10. Changes
This policy may be updated over time. The version in force is always the one published on this page, with the relevant update date.