Privacy and cookies

Information under Regulation (EU) 2016/679 (GDPR). Updated 29 October 2026.

1. Controller and scope

The controller is Amunì s.a.s., registered office: Via Al. De Santis n.6, 91100 Trapani, Italy. The privacy contact is Antonino Ciulla, administrator of Amunì s.a.s. For privacy enquiries and rights requests, contact info@sanvitolocaposicilia.it.

This notice covers the new tourist portal in the /nuovo section of sanvitolocaposicilia.it. It does not describe processing by the previous website or linked third-party websites.

2. Browsing, search and security

The server receives technical information needed to deliver pages: IP address, request time, requested resource, response status and information supplied by your browser, such as device details and referring page. Internal search terms are sent in the request URL; do not enter confidential information.

These data support website delivery, troubleshooting and abuse prevention. Aruba hosting also provides usage statistics based on server logs, without requiring measurement scripts or cookies in your browser; technical data may therefore be processed to understand website usage. The legal basis is our legitimate interest in operating and protecting the service (Article 6(1)(f) GDPR). Technical data transmission is necessary to browse the website.

3. Email enquiries

When you email us, we receive your email address, message and any attachments. Providing these is voluntary; without sufficient information and a contact address we may be unable to reply. We process enquiries to take steps requested before a contract (Article 6(1)(b)), to pursue our legitimate interest in handling editorial enquiries and reports (Article 6(1)(f)), or to meet legal obligations where applicable (Article 6(1)(c)). Please do not send health information or other sensitive data that are unnecessary for your enquiry.

The portal currently provides no newsletter, booking form, payment service or public registration. Sending an enquiry does not subscribe you to marketing communications.

4. Recipients and external services

Data may be accessed by authorised editorial and website personnel and technical providers as required for their services. Hosting is supplied by Aruba S.p.A. Providers processing personal data on our behalf act as processors under Article 28 GDPR. Article 23 of Aruba’s published service terms contains its appointment as data processor. Data may be disclosed to public authorities where legally required. Personal data are not made public.

Accommodation and tourism partner cards are external links, not embedded booking systems. Following a link takes you to a service with its own controller, terms and privacy notice; your browser may transmit technical visit data to that service. Displaying a partner card does not send that partner your email address or a booking enquiry.

The portal does not automatically load third-party maps, videos, fonts or measurement tools. Optional maps are described in the dedicated section. Contact us for details of providers involved in handling a particular enquiry and any transfers outside the European Economic Area. Any such transfers require safeguards under Chapter V GDPR. External websites reached through links are governed by their own privacy notices.

5. Retention

Technical logs are retained as needed for service operation, error diagnosis and incident handling, taking account of the hosting service’s log rotation. Emails are kept until the enquiry has been resolved and for any additional time needed to document its outcome. If a contractual relationship follows, the corresponding legal retention duties apply. Relevant records may be held longer where required for disputes or requests from authorities. You may ask the controller which retention periods apply to specific data.

6. Cookies

No profiling tools, advertising pixels or browser analytics scripts are present in the public configuration checked on the date above. This check does not exclude hosting statistics derived from server logs. The public language switch uses page links rather than a portal language cookie. Strictly necessary technical cookies do not require consent.

Authentication and preference cookie families concern authorised users accessing administration. You can delete or block cookies in your browser settings; blocking technical cookies may prevent administrative login. If non-essential tools are introduced, this notice will be updated and consent obtained before activation wherever required.

7. Your rights

Where the GDPR conditions apply, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We do not carry out profiling or automated decisions producing legal or similarly significant effects.

Email info@sanvitolocaposicilia.it. We normally respond within one month, subject to statutory extensions, and may request only information necessary to verify your identity. You can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or another competent supervisory authority.