Privacy Policy

1. Data Controller

The Data Controller is Panthouse Island, a vacation rental located in Pantelleria (TP), Italy.

Registration Number (CIN): IT081014C2VS6PZPLB

For any information or request regarding the processing of personal data, you can contact us through the contact form on the website.

2. Types of Data Collected

Our website collects the following types of data:

2.1 Navigation Data

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referral data (which site you came from)
• Country and browser language

2.2 Cookies and Similar Technologies

• Necessary Cookies: Essential for website functionality (cookie preferences)
• Analytics Cookies: Google Analytics to analyze traffic and improve the site
• Marketing Cookies: For potential advertising campaigns (if accepted)

2.3 Voluntarily Provided Data

If you contact us through the contact form or email, we collect:

• First and last name
• Email address
• Phone number (if provided)
• Message content

3. Purpose of Processing

Personal data is processed for the following purposes:

• Request Management: To respond to your inquiries and booking requests
• Traffic Analysis: To understand how the site is used to improve it (via Google Analytics)
• Legal Compliance: To fulfill legal obligations for accommodation facilities
• Marketing: Sending promotional communications (only with explicit consent)

4. Legal Basis for Processing

Data processing is based on:

• Consent: For analytics and marketing cookies
• Contract Performance: To manage bookings
• Legal Obligation: To fulfill legal obligations under Italian law for accommodation facilities
• Legitimate Interest: To improve services offered

5. Google Analytics

The website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyze how users use the site.

The generated data (including your IP address) will be transmitted to and stored on Google servers in the United States. Google will use this information to:

• Evaluate website usage
• Compile reports on site activity
• Provide other services related to website activity and internet usage

Google will not associate your IP address with any other data held. You can refuse the use of cookies through our cookie consent banner.

For more information: Google Privacy Policy

6. Data Sharing

Your personal data will not be sold, exchanged, or transferred to third parties, except in the following cases:

• Google Analytics: For website traffic analysis
• Hosting Provider: Hostinger for server management (with adequate security guarantees)
• Competent Authorities: If required by law or to protect our rights

7. Data Retention

Data will be retained for the time necessary for the purposes for which it was collected:

• Navigation Data: Maximum 26 months (Google Analytics)
• Cookie Consent: 12 months
• Contact Requests: 24 months or until consent is withdrawn
• Accounting/Tax Data: 10 years as required by law

8. Data Subject Rights (GDPR)

In accordance with GDPR (EU Regulation 2016/679), you have the right to:

• Access: Obtain confirmation of the existence of your data and access it
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of data (right to be forgotten)
• Restriction: Restrict processing in certain circumstances
• Portability: Receive data in structured format and transfer it to another controller
• Objection: Object to processing for legitimate reasons
• Consent Withdrawal: Withdraw consent at any time
• Complaint: Lodge a complaint with the Data Protection Authority

To exercise these rights, contact us through the contact form on the website.

9. Data Security

We adopt appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including:

• HTTPS encryption for data transmission
• Secure hosting with regular backups
• Limited data access only to authorized personnel
• Regular monitoring of security vulnerabilities

10. Extra-EU Data Transfer

Data may be transferred to the United States (Google Analytics). Google ensures GDPR compliance through Standard Contractual Clauses approved by the European Commission.

11. Minors

The website is not intended for minors under 16 years old. We do not knowingly collect personal data from minors. If you are a parent and discover that your child has provided us with personal data, contact us for removal.

12. Changes to Privacy Policy

We reserve the right to modify this policy at any time. Changes will be posted on this page with an updated date at the top. We invite you to regularly consult this page.

13. Contact

For any questions regarding this privacy policy or to exercise your rights, you can contact us through the contact form on the website.

Supervisory Authority:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza Venezia, 11 - 00187 Rome, Italy
Tel: +39 06.696771
Email: garante@gpdp.it
Website: www.garanteprivacy.it