Privacy Policy – Sardinia Sea & Green
Last updated: 9 November 2026
1. Data Controller
In accordance with EU Regulation 2016/679 (GDPR), the data controller is:
Davide Biondi
Via Leona 12, 44042 Cento (FE), Italy
Email: davide.moodhome@gmail.com
The Sardinia Sea & Green website is dedicated to presenting and managing bookings for a holiday rental apartment located in Costa Paradiso, Sardinia, Italy.
2. Personal Data Collected
The following personal data may be collected through the website:
First and last name.
Email address.
Telephone number.
Arrival and departure dates.
Number and composition of guests.
Information voluntarily provided when making a booking enquiry.
Technical browsing data, such as IP addresses and device information.
Any personal data required for guest identification and registration is processed in accordance with applicable laws.
3. Purposes and Legal Bases for Processing
Personal data is processed for the following purposes:
Booking enquiries and reservations: to take steps before entering into a contract and to perform contractual obligations, pursuant to Article 6(1)(b) GDPR.
Stay-related communications: to manage the contractual relationship with guests.
Tax and legal obligations: to comply with applicable legal requirements, pursuant to Article 6(1)(c) GDPR.
Website security and prevention of misuse: to pursue the legitimate interests of the data controller, within the limits established by applicable law.
Optional analytics and non-essential tracking technologies: based on user consent, where required.
Personal data will not be used for marketing communications without an appropriate legal basis.
4. Third-Party Services and Providers
The following services may be used to operate the website and manage reservations:
Squarespace: the platform used for website hosting and management.
Google Apps Script and Google services: tools used to process booking requests, manage the availability calendar and send booking-related communications.
PayPal: the service used to process online payments. Payment-related personal data is also processed by PayPal in accordance with its own privacy policy.
Any additional tools, such as Google Analytics, will be disclosed in this Privacy Policy before they are activated.
Personal data may also be shared with service providers involved in managing guests' stays, to the extent necessary to provide the requested services.
5. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.
Booking and payment records may be retained for the periods required by tax legislation and other applicable legal obligations.
Data relating to enquiries that do not result in a booking will be retained only for the time necessary to handle the enquiry and for any justified record-keeping purposes.
6. International Data Transfers
Some technology providers may process personal data outside the European Economic Area.
Any such transfers will be carried out in accordance with the safeguards required by the GDPR and the terms applicable to the services used.
7. Your Data Protection Rights
Under Articles 15–22 of the GDPR, where applicable, individuals have the right to:
Access their personal data.
Request correction of inaccurate data.
Request deletion of personal data.
Request restriction of processing.
Object to processing.
Request data portability.
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, please contact:
Individuals also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
8. Cookies
The website may use essential cookies necessary for its operation and, where enabled, analytics cookies or cookies associated with other services.
Detailed information about cookie categories, providers and consent management is available in our Cookie Policy.
Non-essential tracking technologies will only be activated where permitted by applicable law and after obtaining any required consent.
9. Data Security
The data controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unlawful disclosure, taking into account the risks associated with the processing activities.
10. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes to website services, data processing activities or applicable legislation.
The latest version will always be published on this page.