This is a translation: in case of differences, the Italian text prevails. Italiano

Privacy notice

Last updated: 29 October 2026

This notice explains how Ognibene Bartolomeo (“we”) processes the personal data of those who visit trapanidamare.it, those who make a booking and those who contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Ognibene Bartolomeo
Email: trapanidamare@gmail.com
Phone: +39 339 526 3013

What data we process

Browsing data: IP address, browser and device type, pages visited, date and time. They are collected automatically by the systems that run the website and protect it.
WhatsApp messages: your number, your profile name and what you write to us, including attachments.
Emails and phone calls: your email address or your number, and what you write or say to us.
Booking data: name and contact details of the person booking, dates of the stay and number of guests; on arrival, the details of the guests' identity documents, which the law requires of us.

In your messages, write only what is needed for your request: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each use, we state the legal basis, i.e. the letter of art. 6, para. 1, of the GDPR that permits it.

Replying to your requests and, if you ask, preparing a quote or an offer for you: pre-contractual measures taken at your request (letter b).
Managing the contract that arises from the request: performance of the contract (letter b).
Managing the booking and the stay: performance of the contract (letter b). Communicating guests' details to the police (art. 109 of the Testo unico delle leggi di pubblica sicurezza) and, where required, to the Region and the Municipality for statistics and the tourist tax: legal obligation (letter c).
Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (letter f).
Complying with legal obligations, for example tax and accounting obligations: legal obligation (letter c).
Protecting the website from abuse and automated programs: legitimate interest in security (letter f).
Establishing or defending a right: legitimate interest (letter f).
Showing you the Google map, if you choose to load it: your consent, given by clicking (letter a).

Mandatory and optional data

Providing your data is your choice: without the data we need, however, we cannot reply to you.

Booking data and guests' documents are mandatory: without them, we cannot confirm the booking or welcome the guests.

When we ask for your consent, giving it is optional: if you say no, the website and the service still work.

How and for how long we keep the data

We process data with IT tools and, when necessary, on paper. Only authorised persons can see it, and we protect it with appropriate security measures.

The website has a password-protected private area, from which Ognibene Bartolomeo updates the content. Website visitors do not access this area and do not receive its cookies.

Browsing data is kept by the provider that hosts the website for as long as is necessary for security, in accordance with its own rules.
Requests and messages that do not lead to a contract are kept for as long as is necessary to reply and to follow up the negotiation, and in any case for no longer than 6 months from the last contact.
To protect the form and the private area from abuse, the website keeps for a short time, 48 hours at most, a hash of the IP address calculated with a secret key, which does not contain the address in clear text.
If a contract arises from the request, we keep the data for its entire duration and, afterwards, for 10 years, as the law requires for accounting and tax documents (art. 2220 of the Codice civile).
Data from identity documents is used for the mandatory communication to the police: we keep it only for as long as the law requires.

Who receives the data

Data is neither sold nor disseminated. Only the following parties may receive it, each for its own part:

the persons authorised by Ognibene Bartolomeo, who are bound by confidentiality;
OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built the website and manages it: it processes data on our behalf, solely for the technical management of the website;
Cloudflare, Inc. (United States), which hosts the website, protects it and provides the technical tools described on this page: it processes data on behalf of OnlinePerTutti.com, as its supplier;
WhatsApp Ireland Limited, if you write to us on WhatsApp: it processes messages as an independent controller (WhatsApp privacy notice);
Google Ireland Limited, if you load the map: it receives your IP address and may use its cookies, as an independent controller (Google privacy notice);
the accountant and other consultants, banks and public authorities, when required by law or by the contract.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (arts. 44-46):

for US companies that participate in the EU-U.S. Data Privacy Framework, the adequacy decision of the European Commission of 10 July 2023 (Implementing Decision (EU) 2023/1795);
in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which does not have an adequacy decision from the European Commission. The data is kept on the systems of the providers listed above: T.H.K. Consulting Limited accesses it only for the technical management of the website, on our behalf.

For information on these safeguards, or a copy of them, write to trapanidamare@gmail.com.

Your rights

At any time, you can ask us:

to see your data and obtain a copy (access, art. 15 GDPR);
to correct or complete it (rectification, art. 16);
to erase it, when it is no longer needed or the law does not require us to keep it (erasure, art. 17);
to restrict its use (restriction, art. 18);
to receive it in a machine-readable format, to take it elsewhere (portability, art. 20);
to object to its use based on our legitimate interest and, at all times, to its use for marketing purposes (objection, art. 21).

If you have given us your consent, you can withdraw it whenever you wish: withdrawal does not affect what we did before (art. 7, para. 3).

To exercise your rights, write to trapanidamare@gmail.com. We will reply within one month. In more complex cases, this period may be extended by a further two months: if so, we will inform you within the first month (art. 12, para. 3).

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (art. 22).

Complaint to the Garante

If you believe that your data is being processed in breach of the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it (art. 77 GDPR).

The cookies and similar tools the website uses, and how you can manage them, are explained in the cookie notice.

Changes to this notice

This notice may change, for example if the website adds a feature or a regulation changes. The version in force is always this page, with the date at the top.