PRIVACY POLICY
Last update: 28/08/2025
Registered office: Via Liguria, 277/A – 33100 Udine (UD), Italy
VAT No.: 02689660302
PEC (certified email): alsadite@pecimprese.it
Email: info@alsadite.com
Tel.: +39 349 003 0611
– Data provided by the user: first and last name, email, telephone number and the content of messages submitted through forms (e.g., availability requests).
– Booking data: stay dates, number of guests and information necessary to manage the booking; through the Amenitiz booking engine integrated on the “Book” page, certain data may also be collected by Amenitiz to provide the service.
– Payment data (if you make online payments): processed via AmenitizPay and handled by Stripe; card details do not pass through our systems.
– Cookies/similar technologies: technical cookies and, with consent, third-party analytics and/or profiling cookies (see §11 and the Cookie Policy).
– Managing bookings and stays (Art. 6(1)(b) GDPR).
– Legal compliance (e.g., tax and public security obligations) (Art. 6(1)(c) GDPR).
– Security and protection of rights (Art. 6(1)(f) GDPR).
– Marketing communications only with consent (Art. 6(1)(a) GDPR).
– Traffic analysis/monitoring and Website improvement through non-technical tools and cookies only with consent (Art. 6(1)(a) GDPR).
– PSP: Stripe (via AmenitizPay): processes online payments and acts as an independent controller for payment data.
– Website hosting/IT infrastructure provider.
– Service providers (technical support, email), appointed as processors where required.
– Authorities and entities to whom disclosure is required by law.
– Booking/accounting data: for the duration of the relationship and thereafter as required by law (e.g., up to 10 years for tax documents).
– Security logs: 7–30 days, unless extended for technical investigations.
– Marketing: until consent is withdrawn.
– Cookies: as indicated in the preferences panel and in third-party policies.
– collect aggregated/statistical data and, at times, online identifiers (e.g., cookie IDs);
– may anonymise or pseudonymise IPs (e.g., IP masking);
– implement masking of sensitive fields (e.g., card data, private notes) and do not record data entered in payment fields;
– operate as our processors, unless otherwise stated in their policies;
– are activated only after you consent, which can be withdrawn at any time via the cookie panel.
The up-to-date list of tools (e.g., Google Analytics 4, Hotjar, Matomo Cloud/On-Prem) is available in the cookie panel and in the Cookie Policy.
Tel.: +39 349 003 0611
PEC (certified email): alsadite@pecimprese.it
Al “Sa di Te” di Sara Cojutti, Via Liguria, 277/A – 33100 Udine (UD), Italy.
1. Overview
This Privacy Policy describes how www.alsadite.it (the “Website”) collects and processes users’ personal data. The terms “we”, “us” and “Controller” refer to Al “Sa di Te” di Sara Cojutti. The term “user” refers to individuals who visit the Website and/or use the information request and booking services.2. Data Controller
Controller: Al “Sa di Te” di Sara CojuttiRegistered office: Via Liguria, 277/A – 33100 Udine (UD), Italy
VAT No.: 02689660302
PEC (certified email): alsadite@pecimprese.it
Email: info@alsadite.com
Tel.: +39 349 003 0611
3. Categories of data processed
– Browsing data: IP addresses, device identifiers, browser data, technical logs and pages visited.– Data provided by the user: first and last name, email, telephone number and the content of messages submitted through forms (e.g., availability requests).
– Booking data: stay dates, number of guests and information necessary to manage the booking; through the Amenitiz booking engine integrated on the “Book” page, certain data may also be collected by Amenitiz to provide the service.
– Payment data (if you make online payments): processed via AmenitizPay and handled by Stripe; card details do not pass through our systems.
– Cookies/similar technologies: technical cookies and, with consent, third-party analytics and/or profiling cookies (see §11 and the Cookie Policy).
4. Purposes and legal bases
– Responding to enquiries/quotes (Art. 6(1)(b) GDPR).– Managing bookings and stays (Art. 6(1)(b) GDPR).
– Legal compliance (e.g., tax and public security obligations) (Art. 6(1)(c) GDPR).
– Security and protection of rights (Art. 6(1)(f) GDPR).
– Marketing communications only with consent (Art. 6(1)(a) GDPR).
– Traffic analysis/monitoring and Website improvement through non-technical tools and cookies only with consent (Art. 6(1)(a) GDPR).
5. Provision of data
Data requested in contact/booking forms are necessary to handle your request and/or conclude the contract; failure to provide them may prevent us from delivering the service. Consent for optional purposes (marketing; non-technical analytics) is voluntary and denial has no impact on core services.6. Processing methods and security
Data are processed using electronic tools and appropriate technical/organisational measures. We do not perform automated decision-making producing legal effects, nor our own profiling; any third-party profiling/analytics occur only with your prior consent through the dedicated panel.7. Recipients (including bookings and payments)
– Amenitiz Solutions, S.L. (CIF B67096750 – registered office: Plaza d’Urquinaona 4, 08010 Barcelona, Spain): provider of the booking engine integrated on the “Book” page. It processes data necessary for availability/pricing and to finalise bookings as our processor under Art. 28 GDPR. For components hosted on amenitiz.io domains, it may process certain data as an independent controller for its own purposes (e.g., security/fraud prevention) pursuant to its privacy notice.– PSP: Stripe (via AmenitizPay): processes online payments and acts as an independent controller for payment data.
– Website hosting/IT infrastructure provider.
– Service providers (technical support, email), appointed as processors where required.
– Authorities and entities to whom disclosure is required by law.
8. Online payments (if enabled)
If you pay online, card details are entered into PSP interfaces and are not stored in our systems; we only receive outcomes and references necessary for accounting/reconciliation.9. Transfers outside the EEA
If any provider (e.g., PSP or cloud services) processes data outside the EEA, transfers take place in accordance with Chapter V GDPR (e.g., adequacy decisions, Standard Contractual Clauses and supplementary measures). Details can be found in the providers’ privacy notices and are available upon request.10. Retention periods
– Enquiries/quotes: up to 12 months from the last contact, unless needed for defence of legal claims.– Booking/accounting data: for the duration of the relationship and thereafter as required by law (e.g., up to 10 years for tax documents).
– Security logs: 7–30 days, unless extended for technical investigations.
– Marketing: until consent is withdrawn.
– Cookies: as indicated in the preferences panel and in third-party policies.
11. Cookies and preferences
The Website uses technical cookies and, with consent, analytics and/or profiling cookies from third parties (including those related to the booking/payment flows). You may review your choices at any time via the “Manage cookie preferences” link/button on the Website. Details (types, duration, third parties) are provided in the Cookie Policy.12. Monitoring & flow tracking (analytics, funnels, heatmaps)
To improve the Website, we may enable—subject to consent—tools for traffic and behavioural analysis (e.g., click/scroll events, booking funnels, heatmaps and session replay). Such tools:– collect aggregated/statistical data and, at times, online identifiers (e.g., cookie IDs);
– may anonymise or pseudonymise IPs (e.g., IP masking);
– implement masking of sensitive fields (e.g., card data, private notes) and do not record data entered in payment fields;
– operate as our processors, unless otherwise stated in their policies;
– are activated only after you consent, which can be withdrawn at any time via the cookie panel.
The up-to-date list of tools (e.g., Google Analytics 4, Hotjar, Matomo Cloud/On-Prem) is available in the cookie panel and in the Cookie Policy.
13. Data subjects’ rights
You have the right to access and obtain a copy of your data, request rectification or erasure, restriction of processing, portability (where applicable), object to processing based on legitimate interest, and withdraw consent without affecting prior lawfulness. To exercise your rights: info@alsadite.com or the PEC address above. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).14. Minors
The Website and services are not intended for individuals under 14 years of age. If we become aware of non-compliant processing, we will delete such data insofar as permitted by law.15. Joint controllership/roles on the Amenitiz portal
When certain pages or booking flows are provided on amenitiz.io domains, Amenitiz may also process data as an independent controller for its own purposes (e.g., security, performance); our role as controller for booking and stay management remains unaffected. For such processing, please refer to Amenitiz’s privacy notice.16. Changes to this Privacy Policy
We may amend this notice to reflect legal or technical developments. Changes will be published on the Website; where required, we will provide specific notices.17. Contact details
For information or requests: info@alsadite.comTel.: +39 349 003 0611
PEC (certified email): alsadite@pecimprese.it
Al “Sa di Te” di Sara Cojutti, Via Liguria, 277/A – 33100 Udine (UD), Italy.