Privacy and cookies
Information on the processing of personal data provided under Article 13 of Regulation (EU) 2016/679 (“GDPR”) to visitors of the website caposantacroce.com (the “Website”).
1. Data controller
The data controller is Lighthouse Faro Santa Croce S.r.l., VAT no. 01965240896, with registered office in [to be completed] (the “Controller”). The Controller can be contacted at info@caposantacroce.com or on +39 0931 991 284.
2. Data processed
Browsing data. In the course of their normal operation, the systems that run the Website collect certain data whose transmission is implicit in the use of Internet communication protocols: IP address, date and time of the request, requested resource, server response code, browser type and operating system. This data is not collected in order to be linked to identified individuals.
Data provided voluntarily. Sending a message to the email address shown on the Website, or contacting the Controller by phone, entails the collection of the sender’s contact details and of any other personal data included in the communication.
The Website has no data collection forms, account registration or online payments.
3. Purposes and legal basis
Data is processed for the following purposes:
a) operating the Website and keeping it secure, on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR);
b) answering requests for information, availability and event planning, as steps taken at the data subject’s request prior to entering into a contract (Art. 6(1)(b) GDPR);
c) complying with legal obligations, in particular tax and accounting obligations, where a request leads to a stay or an event (Art. 6(1)(c) GDPR).
Providing data for purpose b) is optional; without it, the request cannot be answered.
4. Processing methods
Data is processed by electronic and, where necessary, paper means, with technical and organisational measures appropriate to ensure its security and confidentiality. No automated decision-making or profiling takes place.
5. Recipients
Data may be processed by the Controller’s authorised staff and by providers acting on its behalf, appointed as data processors under Art. 28 GDPR, including Aruba S.p.A. for hosting, domain and email services. Data may also be disclosed to advisers and to public authorities where required by law. Data is never published.
6. Transfers abroad
Data is stored on servers located in the European Union and is not transferred to third countries.
7. Retention period
Browsing data is kept for as long as strictly necessary to operate the Website and keep it secure. Data relating to requests is kept for as long as necessary to answer them; data subject to tax and accounting obligations is kept for the period required by law.
8. Cookies
The Website does not place cookies or other tracking tools on visitors’ devices: no technical, analytics, profiling or third-party cookies are used, so no consent is required. Only users authorised to manage the Website receive, when signing in to the private area, the technical cookies required for authentication.
Links to Google Maps, phone and email open third-party services, whose own privacy notices apply.
9. Data subject rights
Data subjects may at any time exercise the rights set out in Arts. 15–22 GDPR: access, rectification, erasure, restriction of processing, portability and objection. Requests can be sent to info@caposantacroce.com. Data subjects also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Changes
The Controller may update this notice; the version in force is always published on this page.
Last updated: 26 October 2026.