This notice explains what personal data we collect when you visit suitesanmartino.it, write to us, book a stay or buy a gift voucher, why we process it and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Who processes your data

The data controller is Saracino Carlo Giuseppe, Italian tax code SRCCLG94C23C424D, operating the property at Via Arco Caroli 10, 74015 Martina Franca (TA), Italy.

You can reach us at info@suitesanmartino.it or +39 347 3109060 about anything concerning your data.

We have not appointed a Data Protection Officer, as none of the cases requiring one applies.

What we collect, why, and for how long

When you write to us or message us on WhatsApp

We collect your name, email address, phone number and the content of your message. We need them to reply and to prepare a quote: the legal basis is pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

Our forms are protected by Google reCAPTCHA, which analyses browsing behaviour to tell people from automated systems; the basis here is our legitimate interest in not receiving spam (Art. 6(1)(f)).

We keep correspondence for 24 months from your last contact.

When you book a stay

We collect guests’ identification details, contact details, stay dates, payment details and any special requests. These are needed to perform the contract (Art. 6(1)(b)).

Some of this data we must report by law (Art. 6(1)(c)): guests’ identification details to the public security authority, as required of accommodation providers in Italy, plus the data required for the tourist tax and regional statistical reporting.

We keep booking records for 10 years, the term set for accounting records, and mandatory reports for the period each rule requires.

When you buy or receive a gift voucher

From the buyer we collect name, email and, if provided, phone number. The voucher shows the name of the person it is made out to and, where you wrote one, a personal message. The legal basis is performance of the contract (Art. 6(1)(b)).

The voucher stays in our register for its full validity and for as long as accounting obligations require.

If you received a voucher as a gift and want to know what data we hold about you, write to us: it is only the name given by whoever gave it to you and, if any, the message.

When you add an extra service

Massages, romantic dinners, aperitifs and room set-ups are provided by partner professionals and venues. To arrange them we pass on your name and the agreed date and time, and nothing else. This is necessary to perform the contract (Art. 6(1)(b)): without it the service cannot be booked.

When you subscribe to the newsletter

We collect your email address, on the basis of your consent (Art. 6(1)(a)). You can withdraw it at any time, from the unsubscribe link at the foot of every message or by writing to us; withdrawal does not affect the lawfulness of processing carried out beforehand.

We keep your address for as long as you stay subscribed.

When you browse the site

The site uses cookies and similar technologies. Technical ones make it work and need no consent. Statistics and marketing ones — Google Analytics 4 and Google Ads, loaded through Google Tag Manager — run only if you agree via the banner (Art. 6(1)(a)), and you can change your mind at any time from the preferences panel.

If you consent to marketing, Google Ads may receive your email address or phone number in hashed, unreadable form (enhanced conversions), to tell whether one of our ads led to an enquiry.

Details of individual cookies, with names and durations, are in our Cookie Policy.

When you watch a video

Videos are hosted on YouTube and embedded in privacy-enhanced mode: YouTube receives nothing until you press play. If you do, Google’s own notice applies.

Who we share data with

We do not sell your data and do not pass it to anyone for their own purposes. It is processed on our behalf, as processors, by the suppliers we rely on:

• Beddy — the system we use for bookings and availability;
• Hetzner Online GmbH — the servers hosting the site and its records, located in Germany, therefore within the European Union;
• Tophost/Seeweb — domain registration and the service our emails are sent from;
• Brevo — newsletter delivery;
• Google Ireland Ltd. — statistics, advertising, form protection, fonts and video;
• iubenda — collecting and recording cookie consent;
• Stripe and Klarna — card and instalment payments; card details go straight to them and never pass through us;
• the partners providing extra services, limited to what is needed to arrange them;
• our accountant and, where necessary, our legal advisers;
• public authorities, where the law requires it.

If data leaves the European Union

The site and its records are hosted on servers located in Germany, therefore within the European Union.

Some suppliers, Google in particular, may however process data outside the European Economic Area. Where that happens, the transfer relies on the Standard Contractual Clauses approved by the European Commission, or on an adequacy decision. You may ask us for a copy of the safeguards in place.

If you do not give us your data

Nobody is obliged to give us their data. But without the data a booking or a voucher requires we cannot provide the service, and without an email address we cannot send you the newsletter. Optional fields are genuinely optional: leaving them blank changes nothing.

Automated decision-making

We do not take decisions about you by automated means, and we do not profile you beyond the statistics and advertising described above, which run only with your consent.

Your rights

At any time you can ask us to give you access to your data, to correct it, to erase it, to restrict its processing, to receive it in a readable format to take elsewhere, and you can object to processing based on our legitimate interest. Where processing rests on consent, you can withdraw it whenever you like.

Write to info@suitesanmartino.it: we reply within one month. If you believe something is wrong, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the courts.

Changes

If we change tools or the way we work, we update this page and the date at the top. Do look back at it from time to time.