Updated 25 October 2026. This notice covers solesiciliano.it, stay enquiries, newsletters and comments. Information needed for the accommodation itself is explained during booking.
1. Who is responsible
Controller: B&B Sole Siciliano di Alena Rajner, trading as Sole Siciliano. Controller’s address: Via Tobruk 17, 91014 Castellammare del Golfo, Italy. For privacy questions and rights requests, contact info@solesiciliano.it. The accommodation is at Via Tobruk 17, 91014 Castellammare del Golfo, Italy.
2. Stay enquiries and contact
We process your name, email, telephone including its country calling code and the travel dates, guest numbers, children’s ages, accommodation preferences and other details you provide. Required fields are marked and are needed to submit the form; other fields are optional. Please do not include identity documents, payment details, health data or other sensitive information.
We use these details to answer your request, contact you and prepare an offer. The legal basis is taking steps at your request before entering a contract (GDPR Article 6(1)(b)). We save a private WordPress enquiry record and email a notification to our business mailbox. An acknowledgement goes to your email; it does not confirm a reservation. Sending an enquiry does not subscribe you to the newsletter.
Time-limited tokens, duplicate detection and short-lived limits based on derived IP/email values help prevent abuse. The basis is our legitimate interest in site security (Article 6(1)(f)).
3. Newsletter
The newsletter is separate and optional, based on your consent (Article 6(1)(a)). Confirm the subscription by email and unsubscribe through any newsletter. Jetpack/Automattic uses your email and technical request data for delivery and abuse prevention. Withdrawal does not affect earlier lawful processing.
4. Comments
If you comment, your chosen name and comment are public; your email is not published. WordPress also processes technical data for moderation and abuse prevention, based on our legitimate interest in running a public discussion. Do not post private stay details.
5. Cookies, statistics and maps
Essential functions support security, sign-in and language preferences. Optional Jetpack visitor statistics remain off until you accept them. You can accept, reject or change statistics in . Refusal does not affect browsing, enquiries or newsletter choices. Scrolling is not consent.
Google Maps loads automatically on our homepage. Loading that page connects your browser to Google and shares technical information such as your IP address, browser details and the page address. Google may use its own cookies, including cookies linked to a Google account. The statistics choice on this website does not block the map or control Google’s cookies. Google explains its processing, controls and international transfers in its privacy policy and cookie information.
With statistics consent (GDPR Article 6(1)(a)), Jetpack/Automattic processes visit information such as IP address, browser, page, referrer, time and country to produce aggregate reports. Automattic states that identifiable Stats logs are retained for 28 days. No advertising tracker is added by our own consent tool.
| Name / service | Purpose | Duration |
|---|---|---|
sole_privacy_choices | Stores the version, time and statistics choice; not an advertising identifier. | 6 calendar months |
pll_language | Remembers the selected site language. | 1 year |
| WordPress sign-in | Authentication and security, when you sign in. | Session; up to 14 days if “Remember me” is selected |
comment_author_* | Remembers comment details if you select that option. | Up to 1 year |
| Jetpack subscription preferences | Remembers an active newsletter/post subscription. | Up to 347 days |
Change or withdraw statistics consent through Cookie settings in the footer or above. Withdrawal stops further loading and refreshes the page; it cannot retrieve data already transmitted or automatically erase third-party cookies. You can delete cookies or block third-party cookies in your browser. After deleting the choice cookie, using a different browser or a material change, you may be asked again. External links to WhatsApp, Google reviews and social networks open services governed by their own privacy terms.
6. Recipients and international processing
Authorized accommodation staff and people maintaining this website can access the information needed for their work. Service providers include Namecheap, Inc. (hosting, technical logs and recovery), Titan (business email and enquiry notifications), and Automattic/WordPress.com (Jetpack security, newsletter subscriptions and statistics when enabled). Google receives browser data through the automatically embedded map. We do not sell stay-enquiry contact details.
These providers and their subprocessors may process information outside the European Economic Area, including in the United States. Their linked processing terms describe the safeguards for relevant transfers: Namecheap’s data-processing addendum and Titan’s addendum provide for standard contractual clauses; Automattic and Google explain their transfer safeguards. Contact us for information about the arrangements relevant to your data and how to obtain a copy of the applicable safeguards.
7. Retention
Closed enquiries that do not result in a booking are retained for 12 months after the last meaningful contact. We review them manually each month and remove records due for deletion from the website and our business mailbox. Ongoing enquiries, planned future stays and records needed for a documented legal claim are reviewed separately and kept only while that need remains. Deleting a website record does not automatically delete its email copies.
Confirmed bookings, invoices and legally required guest records follow separate retention rules based on applicable contractual and legal obligations. Newsletter contacts are used until unsubscribe; a minimal suppression record may remain to honour that choice. Public comments remain while published, subject to individual review.
Anti-abuse enquiry counters have a one-hour expiry and duplicate-submission tokens a 24-hour expiry; expired WordPress cache entries are removed during normal cleanup. Web-server and security logs are used for delivery, fault diagnosis and abuse investigation. Their retention follows the hosting service’s rotation/archiving settings and the need to investigate a specific incident or meet a legal obligation. No single fixed deletion date applies to every type of hosting log.
Recovery and migration copies can contain older information until a backup is rotated or a retained copy is manually removed. Their retention is assessed by the need to restore the site, complete migration checks or handle a documented incident or obligation; they are not used for ordinary contact or marketing. Deleting a live record does not immediately erase every recovery copy. If data must be restored, relevant erasure requests must be applied again. Contact us for the current arrangements affecting your information. Enquiry review and removal are manual business procedures, not an automatic purge.
8. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You can withdraw consent. Use the privacy email above; proportionate identity checks may be needed. You may complain to the Italian Garante per la protezione dei dati personali or your competent supervisory authority. This site does not make automated decisions producing legal or similarly significant effects.
Supplier information: Namecheap, Titan, Automattic, Jetpack, Google.