Privacy notice
Draft dated 19 July 2026.
This notice explains how personal data is handled when you use this site or send a request. Sardinia Society is in a pilot phase; the parts in brackets will be completed before commercial launch.
Who is responsible
Controller: [Entity to be defined — pilot phase].
The legal entity acting as data controller will be named here before commercial launch.
What we collect
Everything comes from the request form. Nothing else is collected about you as a person.
- Contact details: name, email, phone if you choose to leave it.
- Trip details: dates, coast, number of guests, accommodation status, the services you select, timing, an optional budget band and anything you write in the context field.
- Technical details: your cookie choice and, where present, the campaign parameters (UTM) of the visit that brought you here.
No sensitive data (health, beliefs, biometrics or similar) is requested at any stage. Please do not include it in free-text fields.
Why we use it
- To handle your service request: read it, check feasibility for your dates and reply on the channel you chose.
- To send occasional notes and seasonal updates — only if you tick the separate marketing box. You can withdraw at any time.
Lawful bases
- Handling a request: performance of a contract and pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Marketing updates: your consent (Art. 6(1)(a) GDPR).
- Analytics cookies: your consent, collected through the cookie banner (Art. 6(1)(a) GDPR).
Who receives the data
Suppliers involved in fulfilling a confirmed request — for example a driver or a restaurant — receive only what they need to deliver their part. They are named to you at confirmation, not before.
We do not sell personal data and we do not share it for advertising.
How long we keep it
Requests are kept for the duration of the pilot season, plus what legal obligations require.
[Exact retention periods to be finalised with counsel before commercial launch.]
Your rights
- You can ask for access, rectification, erasure, objection to processing and portability of your data.
- Consent, where given, can be withdrawn at any time. Withdrawal does not affect processing already carried out.
- You can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Contact
[Privacy contact address to be defined — pilot phase.]
A dedicated privacy contact will be published here before commercial launch.