✦ Hotel Santa Lucia
Privacy Policy
Last updated: 4 October 2026
What this notice covers
This notice covers the website www.hotelsantalucia.it only: the requests you send us from the site and the services the site uses. Booking and staying at the hotel (guest registration and reporting to the police, tourist tax, payments, invoicing) are covered by the notice the hotel gives you at booking and check-in.
Data controller
Hotel Santa Lucia di Sammarco Salvatore, Via Alfonso Gatto 44, 84010 Minori (SA), Italy · VAT 01090520659 · info@hotelsantalucia.it · +39 089 877142.
What data we process
Data you give us: name, email and message sent with the contact form, or the data you send us by email, phone or WhatsApp. With the “Request” form in the menu also surname, city, country, phone, stay dates, number of rooms and guests, room type and chosen offer.
• Conversations with the virtual assistant chat, only if you enable it from the cookie banner.
• Technical browsing data: IP address, browser type, pages requested, logged by the server for security.
• Your cookie choice, with a random ID, in the consent record.
Why we process them and on what basis
Answering your requests and sending you a confirmation email: steps you ask for before a possible contract (art. 6.1.b GDPR).
• Protecting the site and the form from abuse and spam (server logs, Google reCAPTCHA, sending limit): our legitimate interest (art. 6.1.f).
• Virtual assistant chat and Google map: your consent (art. 6.1.a and art. 122 of the Italian Privacy Code), which you can withdraw at any time.
• Consent record: obligation to be able to prove the consent received (art. 7.1 and art. 6.1.c).
Who we entrust the data to
Design e Servizi: technical management of the site, the consent record and visit statistics (servers in Italy).
• The site hosting provider and the provider of the hotel mailbox, which receives the form messages.
• Google (reCAPTCHA and embedded map).
• GuestRM: virtual assistant chat.
• Open-Meteo: weather forecast (receives only the IP address).
• The “Book” button takes you to the Beddy booking system, which processes booking data under its own notice.
Providers process data on our behalf and following our instructions. We do not sell or pass on data to third parties for commercial purposes.
Transfers outside the European Union
Some providers, such as Google, may process data in the United States. Google LLC takes part in the EU-US Data Privacy Framework, recognised as adequate by the European Commission (art. 45 GDPR). For other providers, if data leave the EU, the transfer relies on the safeguards of art. 46 GDPR (standard contractual clauses).
Visit statistics
We count visits with Matomo, installed on a server in Italy run by Design e Servizi, without cookies and with a shortened IP address (2 bytes), to know in aggregate form how many people visit the site, which pages they read and how many use “Book” or the contacts. The data are not shared with third parties or used for profiling; detailed data are deleted after 13 months. Legal basis: our legitimate interest (art. 6.1.f). You can opt out of the statistics from the Cookie Policy. The site uses no advertising tools.
How we protect the data
Encrypted connection (HTTPS) across the site; spam-protected form; access to the management panel with personal credentials; agreements with providers under art. 28 GDPR. In case of a data breach we inform the Italian Data Protection Authority and, when required, the people concerned (arts. 33 and 34 GDPR).
How long we keep them
Form requests and messages: for the time needed to answer and to handle a possible booking, then deleted, unless the law requires otherwise.
• Consent record: 13 months.
• Cookie with your choice: 6 months (details in the Cookie Policy).
Your rights
You can ask to access your data, correct them, delete them, restrict or object to their processing and receive them in a portable format (arts. 15-22 GDPR), and withdraw consent at any time without affecting processing already carried out. Write to info@hotelsantalucia.it. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes
We may update this notice when the site services or the rules change. The date at the top shows the latest version.
