Privacy Policy

Last updated: May 7, 2026

1. Data Controller

The Data Controller of the personal data collected through the website jatikahotel.com and, within the limits set out in this privacy notice, through the booking services connected to the website, is:

Jatika srl
Registered office: Loc. Vignola Mare, Via Fiume SNC, Aglientu (SS), Italy
VAT Number: 02617980905
E-mail: info@jatikahotel.com
Phone: +39 340 3867995

For any information regarding the processing of personal data or to exercise the rights granted under Regulation (EU) 2016/679 (“GDPR”), the data subject may contact the Data Controller using the contact details above.

2. Scope of this Privacy Notice

This privacy notice describes how personal data is processed for users who:

• browse the website jatikahotel.com;
• contact the Data Controller via e-mail, telephone, or other available contact channels;
• start or complete a booking request through the booking system connected to the website.

If the user is redirected to pages or technical services provided through external domains or third-party providers, this privacy notice applies to processing activities attributable to Jatika srl as Data Controller, unless otherwise communicated by the Controller or the other party involved in relation to specific processing activities.

This privacy notice does not replace the cookie policy, which should be consulted regarding the use of cookies and similar technologies.

3. Categories of Data Processed

3.1 Browsing Data

During the normal operation of the website, data whose transmission is implicit in the use of internet communication protocols and the IT systems used to operate the site may be processed.

This category includes, by way of example:

• IP addresses or domain names of the devices used;
• identifiers of requested resources;
• date and time of the request;
• browser and operating system parameters;
• technical information about the device;
• access logs and security events.

Such data is not collected by the Data Controller to directly identify users, but may, by their nature, allow identification through processing and association with data held by third parties, within the limits permitted by law.

3.2 Data Voluntarily Provided by the User

The Data Controller may process personal data voluntarily provided by users when contacting the property through the contact details published on the website, such as:

• first name;
• last name;
• e-mail address;
• phone number;
• content of the request;
• data contained in correspondence;
• any additional information voluntarily communicated.

3.3 Data Related to Booking Requests and Booking Management

In the event of initiating or completing a booking, the Data Controller may process data normally necessary for managing the request and the contractual relationship.

3.4 Data Related to Payments, Guarantees and Prepayments

Within the context of a booking, the Data Controller may process data relating to booking guarantees, prepayments or payment of the stay, strictly to the extent necessary for managing the relationship.

Where applicable, payment data may be processed directly by the payment service provider or another party technically responsible for managing the transaction.

3.5 Data Collected Through Cookies and Similar Technologies

The website and, subject to verification of the actual technical configuration, the connected booking page, may use technical cookies and, subject to consent, analytical and/or marketing cookies.

For more details, please refer to the website’s cookie policy.

4. Purpose of Processing, Legal Basis and Nature of Data Provision

4.1 Technical Use of the Website and Security

Browsing data is processed to ensure the proper functioning of the website, technical management of user requests, prevention of malfunctions and monitoring of security.

Legal basis: Art. 6(1)(f) GDPR.

Nature of provision: necessary for browsing and using the website.

4.2 Responding to User Requests

Data voluntarily provided by users is processed in order to respond to requests for information, quotations, availability or clarifications.

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR.

4.3 Booking Management and Contract Performance

Data related to bookings is processed to allow users to verify availability and rates, complete bookings and receive service communications.

Legal basis: Art. 6(1)(b) GDPR.

4.4 Administrative, Fiscal, Accounting and Legal Obligations

Personal data may be processed to comply with obligations established by applicable laws and regulations.

Legal basis: Art. 6(1)(c) GDPR.

4.5 Protection of the Data Controller’s Rights

Personal data may be processed to establish, exercise or defend the rights of the Data Controller.

Legal basis: Art. 6(1)(f) GDPR.

4.6 Analytical and Marketing Cookies

Data collected through non-technical analytical cookies and/or marketing cookies is processed only with the user’s consent where required.

Legal basis: Art. 6(1)(a) GDPR.

5. Service Providers and the Role of Blastness

For the provision and management of digital services connected to the website and bookings, the Data Controller uses external providers who may process personal data on its behalf.

For hosting services, technical infrastructure and booking engine management, the Data Controller uses:

Blastness S.p.A.
Piazza Castello, 26 – 20121 Milan, Italy
Tax Code and VAT Number: 01195440118

Blastness acts as Data Processor pursuant to Art. 28 GDPR.

6. Recipients or Categories of Recipients of Personal Data

Personal data may be disclosed to:

• authorized personnel of the Data Controller;
• consultants and professionals;
• IT and technical service providers;
• Blastness S.p.A.;
• additional data processors;
• competent authorities and subjects authorized by law.

7. Transfers of Data to Third Countries

Any transfers of data to countries outside the European Economic Area will take place in compliance with Articles 44 et seq. GDPR and the safeguards required by applicable law.

8. Data Retention Periods

Personal data is retained for no longer than necessary to achieve the purposes for which it was collected.

• browsing data and technical logs;
• data related to spontaneous requests;
• data related to bookings;
• administrative, tax and accounting data;
• data processed for legal protection purposes;
• data collected through cookies.

9. Rights of Data Subjects

In the cases provided for by Articles 15 et seq. GDPR, data subjects have the right to:

• access their personal data;
• obtain rectification of inaccurate data;
• obtain deletion of personal data;
• obtain restriction of processing;
• receive data portability;
• object to processing;
• withdraw consent previously given;
• lodge a complaint with the Data Protection Authority.

10. How to Exercise Rights

Data subjects may exercise their rights by contacting the Data Controller:

E-mail: info@jatikahotel.com
Phone: +39 340 3867995

11. Profiling

With regard to profiling or tracking activities carried out through cookies or similar technologies, please refer to the cookie policy.

12. Changes to this Privacy Notice

The Data Controller reserves the right to amend or update this privacy notice, in whole or in part, including as a result of regulatory changes, service developments or technical modifications.

Any changes will be published on the website together with the updated revision date.