Privacy Policy

Last updated: October 13, 2026

This text is a basic template, to be reviewed by a legal advisor or accountant before publication — it does not constitute legal advice.

1. Data controller

Fabio Tringale
Via Faro Filadelfo, 102, 104 — 95030 Pedara (CT), Sicily, Italy
Phone: +39 380 182 4545
Email: view email address

2. Data collected and purposes of processing

Through this website we may collect the following categories of data:

• Browsing data (IP address, browser, pages visited) — collected automatically by the servers hosting the site for its technical operation and for security, including to limit repeated requests.
• Availability request (form) — chosen apartment, dates, number of guests, name, email, phone (optional) and message. This data is used to respond to your request. It is received by a Google service (Google Apps Script) linked to a spreadsheet and an email inbox managed by the controller.
• Phone and WhatsApp — phone number and content of the messages you send us, to respond to your requests. WhatsApp is a service provided by WhatsApp Ireland Ltd (Meta group).
• Chat with the virtual assistant "Agata" — the messages you write are sent to Anthropic, the provider of the artificial intelligence model that generates the replies. The conversation also stays in your browser, on your device, for up to 3 days of inactivity. Please do not enter sensitive or confidential data. We record in a Google spreadsheet managed by the controller: (a) the questions the assistant was unable to answer, with language and page; (b) the name you give to receive a partnership offer from a local business, with date, time, language and the offer shared; (c) an event indicating that the information reserved for guests has been unlocked (language, page and time, without the content of the messages).
• Analytics and advertising cookies (only with prior consent) — to understand how the site is used and to measure the conversions of advertising campaigns. See the Cookie Policy for details.

3. Legal basis

Depending on the case, processing is based on:

• the performance of pre-contractual measures requested by the data subject (responding to requests for information or availability);
• the legitimate interest of the controller (technical operation and security of the site, virtual assistant, log of unanswered questions and management of partnerships);
• explicit consent (analytics and advertising cookies, marketing communications).

4. Bookings

You can book through the Airbnb platform or directly with us, using the availability request form, via WhatsApp or by phone. For bookings on Airbnb, the data is processed by Airbnb Ireland UC according to its own privacy policy, for which the controller of this site is not responsible. For direct requests, the data is processed by the controller as described in this policy.

5. Data retention

• Requests for information and availability are retained for the time necessary to respond and, in any case, for no longer than 24 months from the last contact, unless required by law.
• The chat log (unanswered questions, partnerships, events) is retained for no longer than 12 months.
• With the explicit and specific consent of the data subject — distinct from simply sending a request for information — the same data may also be retained for marketing purposes (e.g., communications about offers and news). This consent can be withdrawn at any time by writing to the email address indicated in point 1.
• Browsing data is retained by the hosting provider according to its own terms.

6. Service providers and recipients of data

To operate the site we use service providers that may process data on our behalf: Google (measurement tools, the service that receives the forms, spreadsheets and email), Anthropic (virtual assistant), Vercel (site hosting), WhatsApp (messages) and, for bookings on its platform, Airbnb. Data is not disclosed to the public or sold.

7. Data subject rights

At any time you can exercise the rights provided for in Articles 15-22 of the GDPR (access, rectification, erasure, restriction, portability, objection) by writing to the contacts indicated in point 1. You also have the right to lodge a complaint with the competent data protection authority.

8. Transfer of data outside the EU

Some providers (Google LLC, Anthropic PBC, Vercel Inc., WhatsApp/Meta) are based in, or have infrastructure in, the United States or other non-EU countries. The transfer takes place on the basis of the instruments provided for by the GDPR (adequacy decision or standard contractual clauses). Google's analytics and advertising tools, configured in Google Tag Manager, are activated only after your explicit consent.