Privacy policy and cancellation conditions

PRIVACY NOTICE

Information notice pursuant to Article 13 of EU Regulation 2016/679 and Article 13 of Legislative Decree 196/2003 (Personal Data Protection Code), as subsequently amended.

Last updated January 2026.

In application of European Regulation No. 679 of 2016 and Legislative Decree No. 196 of 2003 concerning the protection of personal data, you are informed that the Data Controller is [Palermo Mare Holidays] (hereinafter referred to as “the Controller”).

Personal data are processed in full compliance with EU Regulation 679/2016 and Legislative Decree 196/2003, as subsequently amended.

The data you provide (you are hereinafter referred to as “the Data Subject”) will be used solely to respond to your requests and may be disclosed to third parties only where necessary for that purpose, or with your explicit consent.

Data will be processed by personnel appointed by the Controller using procedures, technical tools and IT systems suitable for protecting the confidentiality and security of the Data Subject’s data. Processing consists of collecting, recording, organising, storing, consulting, processing, modifying, selecting, extracting, comparing, using, interconnecting, blocking, communicating, disseminating, erasing and destroying data, including combinations of two or more of these activities.

Data will be retained for the time strictly necessary to provide the Data Subject with the services requested and will in any event be deleted following a request by the Data Subject, without prejudice to any further retention obligations required by law. The Data Subject’s data will not be publicly disseminated.

In the course of its activities and for the purposes indicated above, the Controller may use services provided by third parties acting on its behalf and in accordance with its instructions as data processors. These include suppliers, commercial and production partners, intermediaries, technical consultants and similar parties working with our organisation to fulfil the contractual commitments undertaken with you; parties providing a service strictly and necessarily connected with the Controller’s activities, such as tax consultants, banks, shipping agents, insurance companies and public and private bodies, including in connection with inspections or checks; and parties entitled to access the data under legal provisions.

Data may also be disclosed to any parties authorised by law to collect them (for example, provincial health service bodies, tax authorities, etc.).

The Data Subject may request a complete, up-to-date list of the appointed data processors by using the contact details provided below.

Rights of the Data Subject

Right of access (Article 15 GDPR). The Data Subject has the right to obtain access to their data and to lodge a complaint with the supervisory authority.

Right to rectification (Article 16 GDPR). The Data Subject has the right to obtain from the Controller the rectification of inaccurate personal data concerning them.

Right to erasure (right to be forgotten) (Article 17 GDPR). The Data Subject has the right to obtain from the Controller the erasure of personal data concerning them without undue delay.

Right to restriction of processing (Article 18 GDPR). The Data Subject has the right to obtain restriction of the processing of their data.

Notification obligation (Article 19 GDPR). The Controller communicates any rectification, erasure or restriction of processing carried out pursuant to Articles 16, 17 and 18 to each recipient to whom the personal data have been disclosed.

Right to data portability (Article 20 GDPR). The Data Subject has the right to receive the personal data concerning them that they have provided to the Controller, and to transmit those data to another controller without hindrance from the Controller.

Right to object (Article 21 GDPR). The Data Subject has the right to object to the processing of their personal data.

Profiling (Article 22 GDPR). The Data Subject has the right not to be subject to a decision based solely on automated processing, including profiling, which significantly affects them.

The Data Controller is: [Palermo Mare Holidays].

Article 7 – Right of access to personal data and other rights

1. The Data Subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and to receive those data in an intelligible form.

2. The Data Subject has the right to obtain information about:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied where processing is carried out using electronic tools;
d) the identifying details of the controller, processors and the representative appointed pursuant to Article 5, paragraph 2;
e) the parties or categories of parties to whom the personal data may be disclosed or who may become aware of them as a designated representative in the territory of the State, as processors or as persons authorised to process the data.

3. The Data Subject has the right to obtain:
a) the updating, rectification or, where they have an interest, completion of the data;
b) the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed;
c) confirmation that the operations referred to in points a) and b), including their content, have been notified to those to whom the data were disclosed or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right being protected.

4. The Data Subject has the right to object, in whole or in part:
a) on legitimate grounds to the processing of personal data concerning them, even where relevant to the purpose of collection;
b) to the processing of personal data concerning them for the purpose of sending advertising material, direct sales, market research or commercial communications.

The Data Protection Officer is: [Palermo Mare Holidays]

Data Controller and Data Processor

Pursuant to Article 28 of Legislative Decree 196/2003:
The Data Controller:
[Palermo Mare Holidays]
The Data Processor:
[Palermo Mare Holidays]
Registered office:
[Via Torretta 7 - 90147 - Palermo]
VAT number:
[06368350820]
Email:
[palermomare@live.it]
Domain:
[www.palermomare.it]

Links to other websites

The websites to which we direct you, including but not limited to subsidiary websites and third-party service providers, may have a privacy policy different from the one set out here. We accept no responsibility for the privacy policies of linked websites and therefore encourage you to read them.

Children

We do not intend to collect personal information from anyone under the age of 16. If you are under 16, you should not make an online booking or request information, but should ask a parent to do so on your behalf.

Questions or concerns

If at any time you believe that the Controller has not followed the policy set out above, please let us know by sending an email to [Palermo Mare Holidays]. We will do our best to identify and resolve any problem. You may also write to us at [Via Torretta n. 7 - 90147 - Palermo].

Changes to this online privacy policy

We may amend this Privacy Statement from time to time to address changes in legislation, business needs or the requirements of our visitors, guests, marketing partners and service providers. Updated versions will be published on our website together with their update dates, so that you know when the privacy policy was last updated.

Booking cancellation costs

The guest may cancel free of charge up to 30 days before arrival. The guest pays the cost of the first night if they cancel within 30 days before arrival. If the guest does not show up or cancels during the booked stay, they must pay the total amount of the booking.