Legal document

Privacy Policy

Last updated: 24 August 2026.

This notice describes how personal data is processed for users who visit this website and for guests who book a stay at Corte dei Limoni, in accordance with Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the Italian Privacy Code).

1. Data controller

Siciliarelais S.r.l.s.
Via Monsignor Genuardi 32, 95024 Acireale (CT), Italy
VAT number: 05018210871
Email: info@cortedeilimoni.it
Data Protection contact: Elena Bezlepkina, reachable at info@cortedeilimoni.it

2. What data we collect

Data category	When
Contact details (name, email, phone)	Contact form, booking enquiry
Booking data (dates, room, number of guests)	Booking made through the Avaibook engine
Personal and ID document details	At check-in, as required by law (guest registration — Public Security)
Payment data	Handled directly by our payment provider Teya — this site never stores or sees your card details
Browsing and cookie data	Site visits — see our Cookie Policy

3. Purposes and legal basis of processing

Purpose	Legal basis
Handling booking and contact requests	Performance of pre-contractual measures / a contract (Art. 6(1)(b) GDPR)
Providing accommodation and completing check-in	Performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR — Italian Public Security Code)
Tax and administrative obligations	Legal obligation (Art. 6(1)(c) GDPR)
Processing payments	Performance of a contract — processing carried out by Teya as an independent controller or processor, under its own privacy notice
Sending promotional communications (newsletters, offers)	Consent of the data subject (Art. 6(1)(a) GDPR) — optional
Statistical analysis of site usage	Consent of the data subject via the cookie banner

4. Data recipients

Data may be shared with third parties acting as data processors or independent controllers, including:

Avaibook (booking engine and channel manager) — to manage availability, rates and bookings;
Teya (payment service provider) — for secure payment processing;
Aruba S.p.A. (hosting provider) — for the storage and delivery of the website;
Public Security authorities, as required for the mandatory reporting of registered guests;
Tax and accounting consultants, for administrative purposes.

Avaibook's and Teya's servers are located in Europe. Should any other provider process data outside the European Economic Area, this would in any case take place on the basis of adequate safeguards (e.g. European Commission standard contractual clauses).

5. Data retention period

Data relating to bookings and stays is kept for as long as needed to comply with tax and legal obligations (typically 10 years for accounting records). The copy of the ID document collected at check-in for the mandatory report to Public Security (see our Tourist Information notice) is kept for 72 hours after check-out, after which it is deleted. Data collected for marketing purposes is kept until consent is withdrawn.

6. Data subject rights

At any time, you may exercise the rights set out in Articles 15–22 GDPR by contacting the controller at the email address above: access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

7. Changes to this notice

This notice may be updated from time to time. The date of the last update is shown at the top of the document.