Privacy policy

Updated October 2026

Data controller

The data controller is Giuseppe Livecchi, Via delle Salinelle snc, 90015 Cefalù (PA), email info@casevacanzacefalu.it. For any question about your data, write to this address.

What data we process and why

Availability requests and contacts. The site form sends no data to our server: it prepares a message that opens in WhatsApp or your email app. We process the data you send that way (name, contact details, dates, number of guests, message) to reply to you. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).

Stays. If you book, we process the data needed to manage your stay and to meet the legal duties of Italian holiday rentals, including guest registration with the police (Art. 109 TULPS), tourism statistics and the Cefalù tourist tax. Legal basis: contract and legal obligations (Art. 6(1)(b) and (c) GDPR).

Browsing. The server hosting the site automatically logs technical data (IP address, date and time, page requested) for security and operation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Statistics, marketing and external content. Only with your consent we use Google Analytics, the Meta Pixel and Google Maps. Details are in the cookie policy. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the «Cookie preferences» link at the bottom of every page.

Who receives the data

The site's hosting provider; Google Ireland Ltd and Meta Platforms Ireland Ltd, only for the services you consented to; WhatsApp Ireland Ltd and your email provider, if you choose those channels to contact us; public authorities, where the law requires it. We do not sell or pass data to third parties for marketing.

Transfers outside the European Union

Google and Meta may process data in the United States. Both companies participate in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023.

How long we keep data

Requests without a booking: as long as needed to reply and no longer than 12 months. Stay data: for the periods required by tax and public-security rules. Server logs: according to the hosting provider's settings. Cookies: for the durations listed in the cookie policy.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15-22 GDPR), and withdraw consent at any time, by writing to info@casevacanzacefalu.it. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).