1. Data Controller
The data controller of the personal data collected through Sorrento Advice is the website owner.
For any questions regarding this Privacy Policy or to exercise your rights under Regulation (EU) 2016/679 (GDPR), you may contact the data controller at:
2. Data Processed
While using this website, the following categories of data may be processed.
Browsing Data
During navigation, certain technical information necessary for the operation and security of the website may be collected automatically, including:
- IP address;
- browser type and version;
- operating system;
- device information;
- pages visited;
- date and time of access.
User Preferences
The website stores certain technical preferences in the user's browser to ensure the proper functioning of the service, including:
- cookie consent preferences;
- selected language.
These preferences are stored locally in the user's browser and are not used to identify the user.
Data Provided Through the Contact Form
If the user submits a request through the contact form, only the information necessary to respond to the request will be processed, including:
- name;
- email address;
- message content.
The information provided through the contact form is used exclusively to respond to the user's request. No marketing communications are sent unless explicitly requested by the user.
3. Purposes of Processing
Personal data are processed solely for the following purposes:
- ensuring the proper operation and security of the website;
- improving the browsing experience;
- collecting website usage statistics through Google Analytics, subject to the user's consent;
- responding to requests submitted through the contact form;
- preventing spam and abuse of the contact form;
- complying with legal obligations.
4. Legal Basis for Processing
Personal data are processed on one or more of the following legal bases:
- the user's consent;
- the performance of a request submitted by the user;
- the legitimate interest of the data controller in ensuring the security and proper operation of the website;
- compliance with legal obligations.
5. Third-Party Services
The website uses third-party services to provide certain features.
Google Analytics
Google Analytics is used exclusively with the user's consent to collect anonymous or aggregated statistical information about website usage in order to improve content, usability, and overall website performance.
For more information, please refer to Google's Privacy Policy.
Netlify Forms
The contact form is managed through Netlify Forms, which securely processes the information submitted by users for the sole purpose of delivering contact requests to the website owner.
For more information, please refer to Netlify's Privacy Policy.
6. Affiliate Links
The website may contain affiliate links to booking platforms, tourism services, or other commercial partners.
If the user completes a purchase through these links, the website may receive a commission at no additional cost to the user.
The website has no control over the processing of personal data carried out by third-party websites. Users are encouraged to review the privacy policies of those websites before providing any personal information.
7. Data Retention
Personal data are retained only for the time necessary to achieve the purposes for which they were collected or as required by applicable law.
Cookie preferences and language settings are stored in the user's browser until they are deleted or expire according to the relevant storage mechanisms.
Contact form submissions are retained only for the time necessary to handle the user's request and any related follow-up communications, unless a longer retention period is required by applicable law.
8. Data Sharing
Personal data may be processed by technical service providers necessary for the operation of the website, including:
- hosting providers;
- analytics service providers;
- providers of services used to manage the contact form (such as Netlify Forms).
Personal data are not sold or disclosed to the public.
9. International Data Transfers
Some service providers used by the website may process personal data outside the European Economic Area (EEA).
Where this occurs, such processing is carried out in accordance with the safeguards provided by Regulation (EU) 2016/679 (GDPR), including, where applicable, the use of appropriate contractual safeguards.
10. Data Subject Rights
Users may exercise the rights granted under Articles 15 and following of Regulation (EU) 2016/679 (GDPR), including the right to:
- obtain confirmation as to whether personal data are being processed;
- access their personal data;
- request the correction of inaccurate data;
- request the deletion of personal data where applicable;
- request the restriction of processing;
- object to processing where permitted by law;
- withdraw previously given consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the competent Data Protection Authority.
To exercise these rights, users may contact the data controller at:
11. Data Security
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
12. Changes to this Privacy Policy
This Privacy Policy may be updated at any time to reflect legal, technical, or organizational changes.
Users are encouraged to review this page periodically to stay informed about any updates.
The date of the latest revision may be indicated at the bottom of this page.