Privacy policy
Information about personal data processed by SardiniaKey for its own purposes on the public website.
Controller and contact
The controller is the natural person operating the SardiniaKey product. Privacy contact: privacy@sardiniakey.com.
Scope and data subjects
This notice concerns website visitors, people sending contact or demo requests, Host applicants, account users, and business contacts, to the extent the relevant features are actually used.
It does not describe guest processing carried out by a Host to manage a stay and does not replace the Guest notice. In accommodation and booking flows, roles and recipients depend on the specific journey; SardiniaKey cannot be categorised uniformly as controller or processor without verification.
Data, purposes, and legal bases
The sources reviewed confirm contact/Host application forms, technical navigation data, and application accounts. A complete inventory of fields, logs, and recipients has not been verified.
Responding to a user request: contact details and request contents; pre-contractual steps where requested by the person, or legitimate interests in handling relevant communications, to be assessed for each case.
Managing accounts and requested features: account and operation data; performance of an arrangement or pre-contractual steps, or legal obligation where applicable. Necessary data depends on the feature.
Security and diagnostics: relevant technical data and logs; legitimate interests in security or applicable obligations, subject to balancing and documented retention criteria.
Optional marketing: no unsolicited promotional processing or legal basis is asserted without separate verification of the actual tools and applicable basis.
Accommodation requests and recipients
Requests about a stay may be forwarded to the Host or handled through the feature identified in that journey. Before each processing activity, the party determining its purposes and essential means and the recipient must be verified; no uniform SardiniaKey role is asserted for all flows.
Technical providers may receive data only as necessary. The named provider and subprocessor list, processing locations, and any transfers outside the EEA have not been verified and must be completed before publication.
Pixel and cookies
The Meta Pixel and related events are described in the Cookie policy. The application source links it to acceptance of optional measurement and Host campaign pages; no other trackers are asserted as present or absent without a complete technical inventory.
Retention and security
Data is retained for as long as necessary for the purposes for which it is processed and for any applicable legal obligations. Appropriate technical and organisational measures are used to protect data.
Rights and complaints
Individuals may exercise rights under GDPR Articles 15–22, where applicable, by writing to privacy@sardiniakey.com and describing the request. A complaint may be lodged with the competent supervisory authority. Withdrawal applies where consent is the legal basis and does not affect prior processing.