Privacy & Cookie Policy

Last updated: 11 October 2026

This notice explains how we handle the personal data of visitors to sudsardegnastay.com and of guests who book a stay at Shambala Villa, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. We have kept it plain: if anything is unclear, write to us.

Data controller

ABL Management S.r.l., Via Napoli 5, 09013 Carbonia (SU), Italy · VAT no. IT04220330924 · e-mail: Write to us. Sud Sardegna Stay and Shambala Villa are trademarks of ABL Management S.r.l.

What data we process and why

• Booking requests. First name, surname, e-mail, phone, dates of stay, number of guests and any notes. We use them to answer your request, confirm the booking and manage your stay (legal basis: performance of a contract, art. 6.1.b GDPR). No credit-card details are collected on the website: payment is agreed directly with us.
• Contact form. Name, e-mail and message, so we can reply (art. 6.1.b and 6.1.f GDPR).
• Online check-in. Guests’ identity-document details are required by Italian law (art. 109 TULPS) and reported to the State Police through the Alloggiati Web portal; the law also requires reporting for the tourist tax and for ISTAT statistics (legal basis: legal obligation, art. 6.1.c GDPR).
• Invoicing and accounting. The data needed for tax documents is kept to meet legal obligations (art. 6.1.c GDPR).
• Browsing data. The hosting server automatically records the IP address, date and time, page requested and browser in its security logs (art. 6.1.f GDPR, website security). Only with your consent we also collect aggregate visit statistics with Google Analytics (see Cookies). We do no profiling.
• Webcam. The Porto Pino webcam films the landscape from about 50 metres away: people are not recognisable and the images are never used to identify anyone.
• Newsletter. If you subscribe through the box at the bottom of our pages, we process your email address, first name (optional), language and confirmation date, only with your consent (Art. 6(1)(a) GDPR) and only after you have confirmed it through the link sent to you by email. After confirming you may, if you wish, also tell us your last name, country of residence, city, phone number and how you found us: all optional, used only to write you more relevant emails. We use them to send you offers and news from Sud Sardegna Stay. You can unsubscribe at any time with the link in every email or by writing to us: when you unsubscribe we delete your name and the optional details and keep only the address, marked as unsubscribed, so that we never write to you again; if you prefer it fully deleted, just ask. We do not store your IP address. If we ever use an external service to send the emails, we will say so on this page.

Cookies

We use three kinds of cookies and similar tools. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.

• Technical (always on, no consent needed). The language cookie (WPML), the booking system’s session cookie (WP_SESSION_COOKIE, MotoPress Hotel Booking), the hosting provider’s security cookies, the record of your cookie choice (Clickio) and, for registered users, WordPress login cookies.
• Statistics (only with your consent). Google Analytics 4 (Google Ireland Ltd) tells us, in aggregate form, how many people visit the website, which pages they view and where they come from. Cookies: _ga and _ga_*, lasting up to 2 years. Data may also be processed in the United States under the EU-US Data Privacy Framework. If you decline, Google Analytics stores no cookies on your device; Google may only receive anonymous technical signals without cookies (Google Consent Mode).
• Advertising. There are currently no ads and no advertising cookies on the website. If we add advertising in the future (for example Google AdSense), we will do so only with your consent and will update this page.
• External content. The Google Maps map loads only if you click “Show the map”: from then on Google (Google Ireland Ltd) receives your IP address and may set its own cookies.

Consent is collected with Clickio Consent. You can also block or delete cookies in your browser settings; if you block technical cookies, some functions (language, booking) may stop working.

Third-party services

Some resources are loaded from external providers, which receive your IP address in order to deliver them: consent management (Clickio Consent), Google Analytics (only if you accept statistics), Google Maps (only if you open the map), the video-player library and icons (jsDelivr CDN), and the weather and sea data shown next to the webcam (Open-Meteo, an open-source service with no registration). The webcam video stream is served from a server we run on Hetzner Online GmbH infrastructure (Germany). The website is hosted by SiteGround Spain S.L. in data centres within the European Union. Booking and contact e-mails are handled through our e-mail provider. Web fonts are served directly from our own website.

How long we keep data

• Confirmed bookings: for the duration of the relationship and then for 10 years, as required by Italian tax law.
• Requests that did not lead to a booking (declined or closed): personal data is automatically anonymised after 12 months.
• Check-in data: for the period set by public-security law, then deleted.
• Contact messages without a booking: 24 months at most.
• Server logs: 12 months at most, unless needed to investigate abuse.

Who we share data with

Only the parties mentioned above (State Police, the municipality for the tourist tax, our accountant, hosting and technical providers acting as processors) and nobody else. We never sell or pass on data for marketing. We do not transfer data outside the European Union, except for the technical cases listed under third-party services, which are covered by the safeguards provided by the GDPR (EU-US adequacy decision or standard contractual clauses).

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a portable format or object to its processing (arts. 15–22 GDPR) by writing to Write to us. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your own country.

Changes

If we change how we handle data, we will update this page and the date at the top.