Privacy Policy

1. Data Controller

The Data Controller for personal data collected through the sardiniaguide.com website is:

For any request regarding the processing of your personal data, you can write to the email addresses above.

2. Data collected and purposes of processing

2.1 Data provided voluntarily through the contact form

When you fill in the form on the Contact page we collect: first and last name, email address, phone number (optional), type of request and the text of your message. This data is sent directly to the Data Controller's company email inbox and used exclusively to:

• respond to requests for information, quotes or bookings;
• manage the pre-contractual and, where applicable, contractual stage of the requested service;
• fulfil administrative, accounting and tax obligations related to the service provided.

Providing the data marked as mandatory in the form is necessary in order to respond to your request; failure to provide it means we won't be able to reply.

2.2 Browsing data

In the course of normal operation, the IT systems behind this website collect certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, pages visited, access times). This data is used solely to obtain anonymous statistical information about the use of the site and to verify its correct functioning, and is deleted immediately after processing except for investigations into potential computer crimes.

2.3 Google Analytics

The site is set up to use Google Analytics, a statistical analysis service provided by Google Ireland Limited, activated only after your explicit consent via the cookie banner. Google Analytics uses cookies that collect anonymised information about the use of the site (pages visited, time spent, traffic source). The IP address is truncated/anonymised before being stored. You can withdraw your consent at any time from the cookie preferences (🍪 icon at the bottom left). For more details see our Cookie Policy and Google's notice at policies.google.com/privacy.

2.4 WhatsApp

The site includes direct links to WhatsApp Business (wa.me) so you can contact us quickly. If you use this feature, the conversation takes place on the WhatsApp application and is subject to the privacy notice of WhatsApp Ireland Limited (Meta group), available at whatsapp.com/legal/privacy-policy. The Data Controller does not have access to data collected by WhatsApp/Meta beyond the messages actually received in the conversation.

2.5 Google Fonts

The site loads certain typefaces from Google's servers (Google Fonts). This involves transmitting your IP address to Google's servers when the page loads, regardless of whether you have a Google account. This service does not set profiling cookies.

3. Legal basis for processing

Processing of data collected through the contact form is based on Article 6(1)(b) GDPR (performance of pre-contractual measures taken at the data subject's request) and Article 6(1)(f) GDPR (the Controller's legitimate interest in responding to information requests). Processing via Google Analytics is based on the data subject's consent (Article 6(1)(a) GDPR), which can be withdrawn at any time.

4. Retention methods and periods

Data is processed using IT tools and kept for as long as strictly necessary to handle your request and, in the event of a contractual relationship, for the period required by applicable civil and tax law (typically 10 years for administrative/accounting documentation). Data collected via Google Analytics is retained according to the retention settings configured in the Controller's Analytics account, and in any case for no longer than 26 months.

5. Disclosure to third parties and transfers outside the EU

Data collected through the contact form is not disclosed to third parties, except as required to deliver the requested service (e.g. direct suppliers such as transport companies, accommodation providers, guides, when necessary to perform a booked service) and except where required by law.

Google services (Google Fonts, Google Analytics) and WhatsApp/Meta may involve a transfer of data to servers located in the United States or other countries outside the EU. Such transfers are governed by the standard contractual clauses approved by the European Commission, adopted by the respective providers.

6. Your rights

Under Articles 15–22 of the GDPR, you may exercise the following rights against the Data Controller at any time:

• right of access to your personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure ("right to be forgotten"), in the cases provided by law;
• right to restriction of processing;
• right to data portability;
• right to object to processing;
• right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

To exercise these rights you can write to info@sardiniaguide.com.

7. Complaint to the Data Protection Authority

If you believe that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as provided by Article 77 GDPR, or to seek judicial remedy (Article 79 GDPR). More information at garanteprivacy.it.

8. Changes to this notice

The Data Controller reserves the right to modify or simply update this notice, in whole or in part, by publishing changes on the website. Please check this page periodically, referring to the "last updated" date shown above.