This notice explains what personal data ajosardegna.com processes, why, and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. Last updated: 25 October 2026.
1. Data controller
Deck One di Gianfranco Grassi, Via Gramsci 32, 07100 Sassari (SS), Italy, VAT no. IT03080890902, email info@ajosardegna.com. Ajò Sardegna is a Deck One service, built by Pro Motion.
2. How the portal works
Ajò Sardegna lists experiences run by independent tourism operators. When you call, message on WhatsApp or email an operator using the buttons on a listing, you are in direct contact with the operator: the portal does not receive the content of your messages or your booking or payment details. The operator processes the data you give them as an independent controller, under their own privacy notice.
3. What data we process
Browsing data
The server hosting the site automatically logs some technical data (IP address, date and time, page requested, browser) to keep the service running and secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Logs are kept only as long as necessary and no longer than 6 months, unless needed to investigate offences.
Listing statistics
We count, in aggregate form, visits to listings and clicks on contact buttons, so we can give operators daily and weekly statistics. Your IP address is not stored: to avoid double counting we use a temporary encrypted fingerprint that is deleted after 30 minutes. Legal basis: legitimate interest.
Anonymous internal statistics
To know how many people visit the site and which pages they read, we count visits with an internal system, without cookies and without storing your IP address. The visitor of the day is recognised by an anonymous code that changes every day and is deleted the next day: it cannot identify you or follow you over time. We record, in aggregate form, the pages viewed, the referring site (for example Google or Facebook) and the type of device (phone, tablet or computer). This count does not require your consent in the cookie banner.
Google Analytics (only with your consent)
If you accept statistics cookies, we use Google Analytics 4 (Google Ireland Ltd.) to understand in aggregate how the site is used. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link at the bottom of every page. Google may transfer data to the United States under the EU-U.S. Data Privacy Framework. Details in the Cookie policy.
Operators who join the portal
If you join as an operator, we process the data you enter in the form (contact person’s name, business name, VAT number, address, email, phone, WhatsApp, website, description of your activity) to create and manage your listing, provide statistics and handle your subscription and invoicing. Legal basis: performance of a contract and legal obligations (Art. 6(1)(b) and (c) GDPR). Contact details you choose to publish are visible to everyone on your listing. With your consent, we will also use your email to send you service updates (newsletter); you can withdraw at any time.
Emails you send us
If you write to us, we use your data only to reply. Legal basis: steps taken at your request and legitimate interest.
4. Maps
The Google Maps map on the home page only loads when you click the button: until then the site sends nothing to Google. After the click, Google’s privacy policy applies.
5. Recipients
Data may be processed on our behalf by technical providers acting as processors (email services, Google for statistics) and, for operators’ invoicing data, by tax advisers and the Italian e-invoicing system (SdI). We do not sell or share data with third parties for marketing purposes.
6. Retention
- Server logs: up to 6 months.
- Operator data: for the duration of the relationship; accounting data for 10 years as required by law.
- Emails received: as long as needed to handle the request.
- Google Analytics data: 14 months.
7. Your rights
You can at any time request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR), by writing to info@ajosardegna.com. Withdrawing consent does not affect the lawfulness of earlier processing. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your country of residence.
8. Children
The site is not aimed at children under 14 and we do not knowingly collect their data.
9. Changes
We may update this notice; the date of the latest change is shown at the top.