Privacy Policy

Last updated: [19.01.2026]

1. Data Controller

The Data Controller is CAPOFARO SRL, with registered office at Via Faro, 3 – 98050 – Salina, Aeolian Islands (ME), Italy ("Company", "we", "us").

For any questions regarding this Privacy Policy or the processing of personal data, you may contact us via the contact details provided on the website https://capofaro.it/.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through the website https://capofaro.it/ (the "Website").

Reservation and payment services are provided through an external booking engine (Simple Booking). When users are redirected to that platform, the processing of personal data is governed by Simple Booking’s own privacy and cookie policies:
https://www.simplebooking.it/ibe2/hotel/11085?lang=EN&cur=EUR

3. Personal Data We Collect

a) Data provided directly by users

We may collect the following personal data when users interact with the Website:

  • Contact forms: name, email address, phone number, country code, and any information voluntarily included in the message.

  • Newsletter subscription (future): name and email address.

b) Automatically collected data

When users browse the Website, we may automatically collect certain information, including:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and interactions with the Website

4. Purposes and Legal Bases of Processing

Purpose Legal Basis
Responding to inquiries and requests Performance of pre-contractual measures / Legitimate interest
Managing communications Legitimate interest
Newsletter and marketing communications (future) Consent
Website analytics and performance Consent
Compliance with legal obligations Legal obligation

Users may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Newsletter and Marketing Communications

If users subscribe to the newsletter, their data will be processed via Squarespace’s integrated newsletter tools.

Users may unsubscribe at any time by using the link included in each email or by contacting us.

6. Cookies and Tracking Technologies

The Website uses cookies and similar technologies. Detailed information is provided in the Cookie Policy below.

Analytics and marketing cookies are used only with the user’s prior consent, collected through a cookie consent banner compliant with GDPR and ePrivacy regulations.

7. Third-Party Services

We use the following third-party services:

  • Squarespace – website hosting, CMS, and newsletter functionality

  • Google Analytics – website usage analytics

  • Google Maps – interactive map on the contact page

  • Simple Booking – external reservation and payment processing platform

These providers may process personal data as independent data controllers or processors, in accordance with their own privacy policies.

8. Data Transfers Outside the EU

Some service providers (e.g. Google, Squarespace) may transfer personal data outside the European Economic Area. Such transfers are carried out in compliance with GDPR, using appropriate safeguards such as Standard Contractual Clauses.

9. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

10. Data Subject Rights

Under GDPR, users have the right to:

  • Access their personal data

  • Request rectification or erasure

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

Requests may be submitted using the contact details provided on the Website.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page.