Privacy Policy

Last updated: September 8, 2026

This notice explains how personal data is processed through www.labarchettadasandro.it under Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.

1. Date controller

The controller is La Barchetta da Sandro, based at Via del Porticciolo 22, Porto Pino — 09010 Sant’Anna Arresi (SU). Contacts: info@labarchettadasandro.it — +39 353 428 0055.

2. Date processed

• Browsing data: IP address, technical logs, device, browser and information required for website security and operation.
• Requests and bookings: name, contact details, date, time, number of guests and message provided voluntarily.
• Newsletter: email address and evidence of consent.
• Cookie preferences: accepted or rejected categories, notice version and time of choice.

3. Purposes and legal bases

Date is processed to answer requests and manage bookings (pre-contractual or contractual steps), send the requested newsletter (consent), comply with legal duties, protect the website and ensure security (legitimate interest), and enable non-essential services solely on the basis of consent.

4. Retention

Requests and bookings are normally retained for 12 months, unless legal duties or legal claims require longer. Newsletter data is kept until consent is withdrawn. Security logs are limited to the technically necessary period. Cookies choices are stored for no more than 6 months before asking again.

5. Recipients and transfers

Hosting, email and technical support providers may process data as processors where required. Google Maps and YouTube are contacted only after consent to the relevant category. Some providers may transfer data outside the EEA under an adequacy decision or appropriate safeguards such as standard contractual clauses.

6. Your rights

You may request access, correction, erasure, restriction, portability and object where Articles 15–22 GDPR apply, and withdraw consent at any time without affecting earlier processing. Contact info@labarchettadasandro.it. You may also lodge a complaint with the Italian Date Protection Authority.

7. Required data, children and updates

Mandatory fields are needed to handle your request; without them we cannot respond. The website is not intended to knowingly collect children’s data. This notice may be updated when services or applicable rules change.