Privacy Policy
Data Controller: Tourism Coast Srl
Address: Corso Reginna 128, 84010 Maiori (SA) – Italia
Contact email:
Last updated: 01-08-2026
This website (the “Site”) complies with applicable data protection law, in particular Regulation (EU) 2016/679 (“GDPR”).
1. Types of data collected
Browsing data
During normal operation, the information systems and software procedures used to run the Site acquire certain data whose transmission is implicit in the use of Internet communication protocols (IP address, browser type, operating system, access times, pages visited). This data is used only for statistical and IT security purposes and is retained only for the time strictly necessary.
Data voluntarily provided by the user (booking and contact requests)
Optional, explicit, and voluntary submission of data through the booking request form or contact form on the Site results in the collection of the data necessary to handle the request, such as: full name, email address, phone number, check-in/check-out dates, number of guests, and any special requests freely provided by the user.
Note: if, among special requests, the user spontaneously discloses information about dietary needs, allergies, or health conditions, such data falls under the special categories of data under Art. 9 GDPR. The Controller processes this information only for purposes strictly related to providing the requested service (e.g., restaurant meal arrangements) and does not retain it beyond what is necessary.
Data transmission to the booking system (external booking engine)
Data entered in the booking form on the Site (stay dates, number of guests, room type, contact details) is transmitted to the booking system 5stelle*, operated by Zucchetti Hospitality S.r.l. (VAT no. 02894171202), which processes the request and completes the reservation. This party acts as a data processor under Art. 28 GDPR (or as an independent controller, depending on the contractual arrangement in place), as described in its own privacy policy, available on their web platform. If the provider is based outside the EU, the transfer relies on the safeguards required by the GDPR (e.g., standard contractual clauses).
Cookies and measurement tools (Google Analytics)
The Site uses Google Analytics, a statistical analysis service provided by Google Ireland Limited, which uses cookies to collect and analyze, in anonymous/aggregate form, information about how the Site is used (pages visited, time spent, traffic source). These cookies are not strictly necessary and are activated only after the user’s consent via the cookie banner. For more information, see the extended cookie policy and Google’s privacy policy at https://policies.google.com/privacy.
2. Purposes of processing
Collected data is processed for the following purposes:
- ensuring the correct technical functioning of the Site;
- responding to contact or information requests;
- analyzing Site usage in statistical form to improve content and services;
- complying with legal obligations.
3. Legal basis
Processing is based, as applicable, on: consent of the data subject (Art. 6.1.a GDPR, for measurement cookies), performance of pre-contractual/contractual measures requested by the data subject (Art. 6.1.b), legitimate interest of the Controller (Art. 6.1.f, for IT security).
4. Processing methods and retention
Data is processed using IT and telematic tools, with logic strictly related to the purposes indicated, and retained only for the time necessary to achieve those purposes, unless longer retention is required by law.
5. Data sharing and disclosure
Data is not disclosed to the public. It may be shared with third parties acting as data processors (e.g., hosting provider, Google LLC for Google Analytics) or with public authorities in compliance with legal obligations.
6. Transfers outside the EU
Some service providers (e.g., Google) may transfer data to countries outside the EU. Such transfers rely on adequate safeguards under the GDPR (e.g., standard contractual clauses).
7. Data subject rights
As a data subject, you have the right to request at any time: access to your data, rectification, erasure, restriction of processing, data portability, objection to processing, and to withdraw consent at any time without affecting the lawfulness of processing based on consent given before withdrawal. You also have the right to lodge a complaint with the competent data protection authority.
To exercise your rights, please write to:
8. Changes to this policy
The Controller reserves the right to make changes to this policy, publishing them on this page. Please check this page periodically.