Data Controller

​D'Aquino Giovanni

Tax ID: DQNGNN75S21C351C

Via C. Colombo 1

95027 San Gregorio di Catania

Email: infodellova98rooms@gmail.com

Sito web: www.dellova98rooms.com

Type of Data Processed and Purpose

This site is for informational purposes only. We do not collect data through registration forms. Users can interact with us through the following channels:

• Navigation: The Google Sites platform collects anonymous technical data (IP, browser) necessary for site security.

• Email Contact: The optional and voluntary sending of messages to the email addresses listed on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message.

• Social Media Contacts and Chat (WhatsApp, Facebook, Instagram, TripAdvisor): By clicking on the relevant links, the user voluntarily submits their profile information or phone number.

Purpose: All the data indicated above is used exclusively to respond to requests for information, quotes, or reservations. It is not used for marketing purposes without explicit consent.

Cookie

The site uses only technical cookies necessary for navigation. The integration of external services may involve the installation of third-party cookies:

• Google Sites: For hosting and operating the site.

• Google Maps: To show our location in Catania.

• Social Widgets: For connecting to social media platforms.

Third-Party Services

To manage contacts and services, we use external platforms:

• Google (Gmail, Hosting e Maps): Google Privacy Policy

• Meta (WhatsApp, Facebook, Instagram): Meta Privacy Policy 

• Google reCAPTCHA: The site may use invisible Google protection systems to prevent fraudulent activity and ensure safe browsing. See the Google Privacy Policy. 

• TripAdvisor: The site contains links to our official TripAdvisor page to allow users to read and leave reviews. Interaction with this platform involves data processing in accordance with the TripAdvisor Privacy Policy . 

​Processing and Storage Methods

The data is treated confidentially and retained for the time strictly necessary to process the request or to comply with tourism and tax regulations in the event of a stay.

Data Subject Rights

In accordance with the GDPR (EU Regulation 2016/679), the user may request access, rectification, or deletion of their data at any time by writing to: infodellova98rooms@gmail.com.

Method and place of processing of collected data

Methods of processing

The Data Controller processes the Users' Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Personal Data.

The processing is carried out using computer and/or electronic means, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.

Legal basis for processing

The Data Controller processes Personal Data relating to the User if one of the following applies:

• the User has given consent for one or more specific purposes; Note: Under some jurisdictions, the Data Controller may be allowed to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects to such processing (“opt-out”). This, however, does not apply if the processing of Personal Data is regulated by European data protection legislation;

• processing is necessary for the performance of a contract with the User and/or for pre-contractual obligations thereof;

• processing is necessary for compliance with a legal obligation to which the Data Controller is subject;

• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

​

​You can always ask the Data Controller to clarify the specific legal basis for each processing operation, and in particular to specify whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.

Place

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.

The User's Personal Data may be transferred to a country other than their own. To obtain further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for Data transfers outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.

If any of the transfers described above take place, the User can refer to the relevant sections of this document or request information from the Data Controller by contacting them using the contact details provided above.

Retention period

Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.

• Personal Data collected for purposes related to the Data Controller's legitimate interests will be retained until such interests are fulfilled. Users may obtain further information regarding the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period to comply with a legal obligation or an order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this term, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.

Purpose of the Processing of Collected Data 

User data is collected to allow the Owner to provide its Services, as well as for the following purposes: Access to third-party service accounts, Contacting the User, Managing contacts and sending messages, Handling payments, Managing support and contact requests, Hosting and backend infrastructure, Content commenting, Social features, Interaction with external social networks and platforms, Permissions for accessing Personal Data on the User's device, SPAM protection, Data transfer outside the EU, and Displaying content from external platforms.

For further detailed information on the purposes of processing and the specific Personal Data relevant to each purpose, the User can refer to the relevant sections of this document.

Facebook permissions required by this Application

This Application may request certain Facebook permissions that allow it to perform actions with the User's Facebook account and collect information, including Personal Data, from it. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook Inc.

For more information on the following permissions, please refer to the Facebook permissions documentation and the Facebook privacy policy.

Basic Information

The basic information of a registered Facebook User, which typically includes the following data: ID, name, image, gender, and localization language, and, in some cases, Facebook "Friends." If the User has made additional data publicly available, this data will be available.

Dettagli sul trattamento dei Dati Personali

Personal Data is collected for the following purposes and using the following services:

• Access to third-party service accounts

This type of service allows this Application to access Data from your accounts on third-party services and perform actions with them.

These services are not activated automatically, but require the express permission of the User.

• Facebook account access (this Application)

This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook, Inc.

Permissions requested: Access to private data.

Place of processing: United States –Privacy Policy. Privacy Shield participant.

• Transfer of Data outside the EU

The Data Controller may transfer Personal Data collected within the EU to third countries (i.e., any country outside the EU) only pursuant to a specific legal basis. Therefore, such Data transfers are carried out pursuant to one of the legal bases described below.

The User may request information from the Data Controller regarding the applicable legal basis specifically applicable to each individual service.

Transfer to third countries based on standard contractual clauses (this Application)

When this is the legal basis, the transfer of Personal Data from the EU to third countries is based on standard data protection clauses adopted by the European Commission.

In such cases, the recipients of the Data have agreed to process the Personal Data in accordance with the levels of protection required by law. Users may request further information by contacting the Data Controller using the contact details provided in this document.

Personal Data collected: various types of Data.

Transfer to third countries based on consent (this Application)

When this is the legal basis, the transfer of Personal Data from the EU to third countries occurs only when the User has expressly consented to such transfer after being informed of the risks due to the lack of an adequacy decision and the appropriate safeguards adopted.

In such cases, the Data Controller informs Users and collects their consent through this Application.

Personal Data collected: various types of Data. 

Data Transfer to countries that guarantee European standards (this Application)

When this is the legal basis, the transfer of Personal Data from the EU to third countries is based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with reference to individual third countries that it deems to ensure a level of protection for Personal Data comparable to that provided by European data protection legislation. Users can view the updated list of adequacy decisions on the European Commission's website.

Personal Data collected: various types of Data.

Data Transfer from the EU and/or Switzerland to the United States under the Privacy Shield (this Application)

When this is the legal basis, the transfer of Personal Data from the EU or Switzerland to the United States occurs in accordance with the EU-US or Swiss-US Privacy Shield.

Specifically, Personal Data is transferred to entities that have self-certified under the Privacy Shield and therefore guarantee an adequate level of protection for the transferred Data. The services affected by the data transfer are listed in the respective sections of this document. Among these, those that adhere to the Privacy Shield can be identified by consulting their privacy policy or by checking their registration status on the official Privacy Shield list.

User rights under the Privacy Shield are described in a constantly updated form on the U.S. Department of Commerce website.

The transfer of Personal Data from the EU or Switzerland to the United States to entities that are not (no longer) registered with the Privacy Shield is permissible only under another valid legal basis. Users can request information from the Data Controller regarding these legal bases.

Personal Data collected: various types of Data.

• Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.

If a service of this type is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages on which it is installed.

Google Fonts (Google Inc.)

Google Fonts is a font display service managed by Google Inc. that allows this Application to integrate such content within its pages.

Personal Data collected: Usage data and various types of Data as specified in the service's privacy policy.

Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Google Maps Widget (Google Inc.)

Google Maps is a map visualization service provided by Google Inc. that allows this Application to integrate such content into its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States –Privacy Policy. Privacy Shield participant.

TripAdvisor widget (TripAdvisor LLC)

TripAdvisor widget is a content visualization service provided by TripAdvisor LLC that allows this application to integrate content from this external platform within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. 

Widget Instagram (Instagram, Inc.)

Instagram is an image visualization service provided by Instagram, Inc. that allows this application to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States –Privacy Policy. 

Widget Video YouTube (Google Inc.)

YouTube is a video content viewing service provided by Google Inc. that allows this application to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant. 

Widget Video YouTube senza cookie (Google Inc.)

YouTube is a video content viewing service provided by Google Inc. that allows this Application to integrate such content within its pages.

This widget is set so that YouTube does not store information and cookies about Users on this Application unless they play the video.

Personal Data collected: Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant. 

• Personal Data collected through sources other than the User

The Owner of this Application may have legitimately collected Personal Data relating to the User without their involvement, drawing on sources provided by third parties, in accordance with the legal bases described in the section on the legal bases of processing.

If the Owner has collected Personal Data in this manner, the User can find specific information regarding the sources in the respective sections of this document or by contacting the Owner.

User Rights

Users may exercise certain rights regarding the Data processed by the Data Controller.

Specifically, the User has the right to:

• withdraw consent at any time. The User may withdraw previously expressed consent to the processing of their Personal Data.

• object to the processing of their Data. The User may object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below.

• access their Data. The User has the right to obtain information about the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the processed Data.

• verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.

• obtain restriction of processing. Under certain conditions, the User may request restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its storage.

• obtain the deletion or removal of their Personal Data. Under certain conditions, the User may request the Data Controller to delete their Data.

• Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party, or on contractual obligations related to it.

• Filing a complaint. The User can file a complaint with the competent data protection authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are informed that, if their Data is processed for direct marketing purposes, they can object to the processing without providing any justification. To learn whether the Data Controller processes data for direct marketing purposes, Users can refer to the relevant sections of this document.

How to exercise your rights

To exercise User rights, Users may direct a request to the Data Controller's contact details provided in this document. Requests are submitted free of charge and processed by the Data Controller as quickly as possible, in any case within one month.

​Further information on Personal Data

​

Further information on data processing

Legal defense

The User's Personal Data may be used by the Data Controller to defend itself in court or in the preparatory stages leading to possible legal action against improper use of this Application or related services by the User.

The User declares to be aware that the Data Controller may be required to disclose data upon request of public authorities.

Specific information

Upon the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact information.

Exercise of Rights by Users

The subjects to whom the Personal Data refers have the right at any time to obtain confirmation of the existence or otherwise of their Personal Data from the Data Controller, to know its content and origin, to request a copy of all processed data, to verify its accuracy or request its integration, deletion of the account and processed data, updating, rectification, transformation into anonymous format, or blocking of Personal Data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller.

For any requests regarding the processing of your data on dellova98rooms.com, please write to us at infodellova98rooms@gmail.com.

To find out whether any third-party services used support them, please consult their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Please check this page often, referring to the last modification date indicated at the bottom. If you do not accept any of the changes made to this privacy policy, you must cease using this Application and may request that the Data Controller remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to all Personal Data collected up to that point.

Definitions and Legal References

Personal Data (or Data)

Personal data means any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

Usage Data

This information is collected automatically by this Application (or by third-party applications used by this Application), including: IP addresses or domain names of computers used by the User who connects to this Application, URI (Uniform Resource Identifier) ​​addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal details of the visit (e.g., the time spent on each page), and the details of the path followed within the Application, with particular reference to the sequence of pages visited, and other parameters relating to the operating system and the User's IT environment.

User

The individual using this Application, who must coincide with or be authorized by the Data Subject, and whose Personal Data is being processed.

Data Subject

The natural or legal person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public administration, or any other body, association, or organization designated by the Data Controller to process Personal Data, as set forth in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public administration, or any other body, association, or organization with the right, also jointly with another Data Controller, to make decisions regarding the purposes and methods of processing Personal Data and the means used, including security measures, concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool by which the Personal Data of Users is collected.

Cookie

A small piece of data stored on the User's device.

Legal References

​This privacy policy has been prepared based on multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679.

This privacy policy applies exclusively to this Application.

Contact Us

For any questions regarding this Privacy Policy, please contact us at infodellova98rooms@gmail.com.

Last revised: May 5, 2026