Privacy Policy

Notice under Regulation (EU) 2016/679 (GDPR) about personal data processing carried out by Sicily Connection.

Last updated: 01/03/2026

1. Data controller

Sicily Connection - Email: info@sicilyconnection.com - Address: Via San Matteo 19c, 95014 Giarre (CT), Italy.

2. Personal data processed

Technical browsing data (IP address, user agent, technical logs and session data).
Data submitted in contact forms (name, email, phone, message).
Data submitted for activity/excursion/transfer requests (identity details, service details, notes).
Booking and billing data (full name, email, phone, address, tax code/VAT if requested).
User account data (registration, login, booking history).
Newsletter data (name, email) if voluntarily subscribed.
Payment data processed by external providers (Stripe/PayPal). Sicily Connection does not store full card numbers.
Anti-fraud tokens/scores from Google reCAPTCHA v3 on protected forms.

3. Purposes and legal bases

Purpose	Legal basis
Managing requests and bookings	Contractual/pre-contractual measures (art. 6.1.b GDPR).
Managing payments and confirmations	Performance of a contract (art. 6.1.b GDPR).
Tax and accounting obligations	Legal obligation (art. 6.1.c GDPR).
Website security and abuse/fraud prevention	Legitimate interest (art. 6.1.f GDPR).
Newsletter	Consent (art. 6.1.a GDPR), revocable at any time.
Analytics and marketing tags	Cookie consent (art. 6.1.a GDPR).

4. Data recipients

Authorized staff and collaborators involved in service operations.
Technical providers (hosting, application maintenance, email services).
Payment providers (Stripe, PayPal).
Security/analytics providers (Google reCAPTCHA, Google Analytics, Google Tag Manager when consented).
Tax/accounting advisors and competent authorities where required by law.

5. Transfers outside the EEA

Some providers may process data outside the European Economic Area. In such cases, transfers rely on appropriate safeguards (for example standard contractual clauses).

6. Retention periods

Contact/activity/transfer requests: up to 24 months, unless longer retention is required for service handling.
Booking and billing data: up to 10 years for legal/tax obligations.
User account data: until deletion request or prolonged inactivity, subject to legal obligations.
Technical and security logs: for the period strictly necessary to protect systems.
Newsletter data: until consent withdrawal (unsubscribe).

7. Data subject rights

You can exercise rights under articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability, consent withdrawal) by writing to info@sicilyconnection.com. You can also lodge a complaint with the Italian Data Protection Authority.

8. Automated decision-making

No automated profiling producing legal or similarly significant effects is carried out.

9. Cookies and tracking

Details about cookies, tracking tools and consent management are available in the Cookie Policy.

Read Cookie Policy Back to Home