Privacy Policy

Last updated: 13 November 2026

This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003, explains how we process the personal data of visitors to www.dongiovannihotel.it and of people who contact us through the website.

1. Data controller

Don Giovanni Hotel S.r.l.
Contrada Pandolfina, 92017 Sambuca di Sicilia (AG), Italy
VAT and tax code 02734450840 · REA AG-203153
Email: info@dongiovannihotel.it · Certified email (PEC): dongiovannihotel@pec.it
Tel. +39 0925 942511

2. What data we process

Browsing data

The systems that run the website collect some technical data during normal use, as part of how the Internet works: IP address, browser and device type, date and time of the request, page visited and server response code. This data is used only to keep the website running and secure and to detect any misuse.

Data sent through the enquiry form and by email

When you fill in the "We are here for you" form or write to us, we process the data you provide: first name, last name, mobile number, email address, dates of stay, number of adults and children and any notes. Fields marked with an asterisk are required for us to reply. Please do not include special categories of data (for example health information) in the notes unless strictly necessary for your stay.

Data collected through cookies and similar tools

The website uses technical cookies and, only with your consent, analytics cookies (Google Analytics) and third-party content (Google Maps). Full details are in the Cookie Policy.

3. Why we process it and on what legal basis

• To reply to your requests for information, availability and quotes and, if you wish, to manage the resulting booking: legal basis is taking steps at your request prior to entering into a contract, or performing a contract (Art. 6(1)(b) GDPR).
• To comply with legal obligations (for example accounting, tax or requests from authorities): Art. 6(1)(c) GDPR.
• To keep the website secure, prevent misuse and automated form submissions, and protect our rights in case of disputes: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Aggregated visitor statistics with Google Analytics and displaying the Google Maps map: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the "Cookie preferences" link at the bottom of every page.

We do not use your data to send you advertising or newsletters and we do not sell it to third parties. We do not make decisions based solely on automated processing.

4. How long we keep it

• Requests sent through the form or by email: for as long as needed to handle them and in any case no longer than 24 months from the last contact, unless they lead to a booking (in which case the periods required by law for accounting and tax records apply, usually 10 years).
• Technical security data linked to the form (encrypted IP address): no longer than 1 hour.
• Browsing data in server logs: according to the hosting provider's technical periods, usually no longer than 12 months.
• Google Analytics statistics: 14 months.

5. Who it may be shared with

Data is processed by the controller's authorised and trained staff and may be processed on our behalf by providers acting as data processors under Art. 28 GDPR:

• Aruba S.p.A. (Italy): website hosting and email service;
• Google Ireland Ltd.: Google Analytics and Google Maps, only if you have given consent;
• the provider responsible for the technical management of the website, for maintenance only.

Data may also be disclosed to public authorities where required by law.

6. Transfers outside the European Union

Google services may involve the transfer of some data to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, found adequate by the European Commission's decision of 10 July 2023, and also applies Standard Contractual Clauses. This transfer only takes place if you accept the related cookies.

7. Your rights

At any time you may request access to your data, rectification, erasure, restriction of processing and data portability, object to processing based on legitimate interest and withdraw any consent given, without affecting the lawfulness of processing carried out before withdrawal (Articles 15-22 GDPR). To exercise your rights, write to info@dongiovannihotel.it or to our certified email dongiovannihotel@pec.it: we will reply within one month.

If you believe that the processing breaches data protection law, you may lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

8. Minors

The enquiry form is intended for adults only. If you are under 18, please ask a parent to contact us.

9. Security

The website uses an encrypted connection (HTTPS) and appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction.

10. Changes

We may update this notice; the current version is always published on this page with the date of the last update.