Last updated: 20 October 2026
Privacy & Cookie Policy
Information on the processing of personal data under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) for visitors to www.sapedra.it and for anyone who contacts us or books a stay.
1. Data controller
The data controller is Hotel Sa Pedra, VAT no. 02691110908, Viale Murta Maria 33, 07026 Olbia (SS), Italy.
Email: info@sapedra.it · Tel. +39 0789 379025
2. What data we process and why
a) Browsing the website
When you visit the website, our hosting provider automatically records some technical data (IP address, browser and device type, date and time, pages requested) needed to run and secure the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). This data is kept for the short period set by the provider and is not used to identify you.
b) Usage statistics – Google Analytics
Only if you accept statistics cookies, we use Google Analytics 4 to understand how the website is used: pages visited, device type, approximate region, where the visit came from and some actions on the site (e.g. availability searches with dates and number of guests, clicks on “Book”, phone, WhatsApp or email). Google Analytics 4 does not log or store IP addresses. We do not use this data for advertising or profiling. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link at the bottom of the website. Retention: 14 months.
c) Enquiries
If you email us, message us on WhatsApp or call us, we process the data you provide (name, contact details, content of your enquiry) in order to reply. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Retention: as long as needed to handle the enquiry and no longer than 24 months, unless it leads to a booking.
d) Bookings and your stay
Online bookings are made through the BookingExpert booking system, which processes data on our behalf. We process the data needed to manage your booking and stay (personal and contact details, dates, guests, special requests, and payment data handled by the booking system and its payment providers). Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR), including reporting guest details to the police authorities (Art. 109 TULPS, “Alloggiati Web”), tourist tax, and tax and accounting obligations. Retention: for the duration of the relationship and the periods required by law (usually 10 years for tax records).
3. Who we share data with
Data may be processed on our behalf, and only for the purposes above, by: our website hosting provider (Netlify, Inc.); Google Ireland Ltd / Google LLC for statistics (only with your consent); the booking system provider (BookingExpert) and its payment services; our tax and accounting advisers. Data is also disclosed to authorities where required by law. We do not sell your data or pass it on to third parties for marketing.
4. Transfers outside the EU
Some providers (Netlify, Google) may process data in the United States. These transfers are based on the European Commission’s adequacy decision for the EU‑U.S. Data Privacy Framework and/or the Standard Contractual Clauses approved by the Commission.
5. Cookies and similar technologies
The website only uses the technologies listed below. Our fonts are hosted on our own website, with no connection to external servers. Links to Google Maps, WhatsApp and the booking system lead to external services that have their own privacy policies.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| sp_consent_v1 | sapedra.it | Remembers your cookie choice (browser local storage) | Until deleted | Technical – no consent needed |
| _ga | Google Analytics | Distinguishes visitors for statistics | 2 years | Statistics – only with consent |
| _ga_<ID> | Google Analytics | Keeps the session state | 2 years | Statistics – only with consent |
You can change your mind at any time with the button below or the “Cookie settings” link at the bottom of the website. You can also delete cookies in your browser settings.
6. Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15–22 GDPR). You can also withdraw your consent, without affecting the lawfulness of processing before withdrawal. To exercise your rights, email info@sapedra.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
7. Other information
Providing data for bookings and stays is necessary to conclude the contract and meet legal obligations; for enquiries it is optional, but without it we cannot reply. We do not carry out automated decision-making. This policy may be updated; the date of the latest change is shown at the top.
Your choice has been reset: you will be asked again on your next visit to the website.