Skip to content
La Senyera · Holiday home · Alghero
Check availability

Privacy policy

This is a translation of the Italian text. If the two differ, the Italian version prevails.

Last updated: 17 October 2026

This policy explains how Simula Maria Teresa (‘we’) processes the personal data of people who visit lasenyera.it, make a booking or contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Simula Maria Teresa
Email: teresasimula@hotmail.it
Telephone: +39 339 446 0628

What data we process

  • Browsing data: IP address, type of browser and device, pages visited, date and time. This data is collected automatically by the systems that run and protect the site.
  • WhatsApp messages: your number, your profile name and what you write to us, including attachments.
  • Emails and phone calls: your email address or your number, and what you write or say to us.
  • Booking data: the name and contact details of the person booking, the dates of the stay and the number of guests; on arrival, the details of the guests' identity documents, as required by law.

In your messages, write only what your enquiry requires: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each use we state the legal basis, that is, the point of Article 6(1) GDPR that allows it.

  • Replying to your enquiries and, if you ask, preparing a quote or an offer for you: pre-contractual measures taken at your request (point (b)).
  • Managing the contract that arises from the enquiry: performance of a contract (point (b)).
  • Managing the booking and the stay: performance of a contract (point (b)). Sending the guests' details to the Questura, the provincial police headquarters (Art. 109 of the Italian Consolidated Law on Public Security), and, where applicable, to the Region and the Municipality for statistics and the tourist tax: legal obligation (point (c)).
  • Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (point (f)).
  • Complying with legal obligations, for example tax and accounting obligations: legal obligation (point (c)).
  • Protecting the site from abuse and automated programs: legitimate interest in security (point (f)).
  • Enforcing or defending a right: legitimate interest (point (f)).

Mandatory and optional data

Giving us your data is your choice: without the data we need, however, we cannot reply to you.

Booking data and the guests' documents are required: without them, we cannot confirm the booking or welcome the guests.

When we ask for your consent, giving it is optional: if you say no, the site and the service still work.

How and for how long we keep the data

We process the data electronically and, when necessary, on paper. Only authorised people can see it, and we protect it with appropriate security measures.

The site has a password-protected admin area, from which Simula Maria Teresa updates the site's content. Visitors to the site have no access to it and do not receive its cookies.

  • Browsing data is kept by the provider that hosts the site for as long as necessary for security, in accordance with its own rules.
  • We keep enquiries and messages that do not lead to a contract for as long as necessary to reply and to conduct any negotiations, and in any case for no longer than 6 months after the last contact.
  • To protect the form and the admin area from abuse, the site briefly keeps (for 48 hours at most) a hash of the IP address, generated with a secret key, which does not contain the address in plain text.
  • If the enquiry leads to a contract, we keep the data for the whole term of the contract and then for a further 10 years, as required by law for accounting and tax records (Art. 2220 of the Italian Civil Code).
  • Identity document details are needed for the mandatory report to the Questura: we keep them only for as long as the law requires.

Who receives the data

The data is not sold or disseminated. Only the following recipients may receive it, each within its own remit:

  • the people authorised by Simula Maria Teresa, who are bound by confidentiality;
  • OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the site: it processes the data on our behalf, solely for the technical management of the site;
  • Cloudflare, Inc. (United States), which hosts and protects the site and provides the technical tools described on this page: it processes the data on behalf of OnlinePerTutti.com, as its supplier;
  • WhatsApp Ireland Limited, if you write to us on WhatsApp: it processes the messages as an independent controller (WhatsApp privacy policy);
  • the accountant and other advisers, banks and public authorities, where required by law or by the contract.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (Arts 44–46):

  • for US companies that participate in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795);
  • in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which is not covered by an adequacy decision of the European Commission. The data is stored on the systems of the providers listed above: T.H.K. Consulting Limited accesses it only for the technical management of the site, on our behalf.

For information about these safeguards, or a copy of them, write to teresasimula@hotmail.it.

Your rights

At any time, you can:

  • ask to see your data and get a copy of it (access, Art. 15 GDPR);
  • ask us to correct or complete it (rectification, Art. 16);
  • ask us to erase it, when it is no longer needed or the law does not require us to keep it (erasure, Art. 17);
  • ask us to restrict its use (restriction, Art. 18);
  • receive it in a machine-readable format, so that you can take it elsewhere (portability, Art. 20);
  • object to its use based on our legitimate interest and, in all cases, to its use for marketing purposes (objection, Art. 21).

If you have given us your consent, you can withdraw it at any time: withdrawal does not affect the lawfulness of the processing carried out before it (Art. 7(3)).

To exercise your rights, write to teresasimula@hotmail.it. We will reply within one month. In more complex cases this period may be extended by a further two months: if so, we will tell you within the first month (Art. 12(3)).

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22).

Complaint to the Garante

If you believe that your data is being processed in breach of the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it (Art. 77 GDPR).

The cookie policy explains which cookies and similar tools the site uses and how you can manage them.

Changes to this policy

This policy may change, for example if the site adds a feature or a law changes. The version in force is always the one on this page, with the date at the top.