Privacy Policy

This notice describes how Dolidays Srl collects and processes the personal data of users of the dolidays.com website and related services. For specific information on cookies, please refer to the Cookie Policy, of which this document is an integral part.

1. Data controller

2. Data collected

In the course of using the site, Dolidays Srl processes the following categories of personal data:

• Registration and profile data: first name, last name, email address, password (stored in encrypted form).
• Optional personal data: phone number, date of birth, address, city, postal code, country, provided optionally to complete the customer profile.
• Booking data: chosen accommodation, stay dates, number of guests, amount, payment status.
• Payment data: payments are handled directly by the payment service provider Nexi S.p.A. via the Nexi XPay platform; Dolidays Srl does not receive or store full payment card data.
• Technical and browsing data: IP address, browser and device type, pages visited, application logs collected automatically during browsing, including via cookies (see Cookie Policy).
• Communications: content of any messages sent through the site's contact forms (e.g. reports, owner enquiries).

3. Purposes and legal basis of processing

4. Data recipients

Data may be shared, to the extent necessary for the purposes above, with:

• The owner/manager of the booked accommodation, via their respective property management systems (e.g. Zak/WuBook, Happy Rentals), limited to the data necessary to deliver the booked stay;
• Nexi S.p.A., for payment processing;
• Technical service providers acting as data processors on behalf of Dolidays Srl (e.g. hosting, email delivery, statistical analysis tools such as Google Analytics);
• Public authorities, when required by law.

Data is not disclosed publicly. Any transfers to providers outside the EU take place only towards parties that guarantee an adequate level of protection (e.g. through standard contractual clauses approved by the European Commission).

5. Data retention period

Account data is kept for the duration of the relationship with the user and, after account deletion, for the time necessary to comply with legal obligations (e.g. tax, accounting) or to establish/defend a legal claim. Booking data is retained in accordance with the legal terms applicable to accounting and tax documentation. Technical logs are kept for a limited period, strictly necessary for security and maintenance purposes.

6. Data subject rights

As a data subject, the user has the right to request at any time, at the contact details provided above:

• access to their personal data (Art. 15 GDPR);
• rectification of inaccurate or incomplete data (Art. 16 GDPR);
• erasure of data, in the cases provided by law (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• portability of the data provided (Art. 20 GDPR);
• objection to processing based on legitimate interest (Art. 21 GDPR);
• withdrawal of consent, where processing is based on it, without affecting the lawfulness of processing carried out before withdrawal.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing infringes applicable law.

7. Provision of data

Providing the data necessary to create an account and manage bookings is mandatory: without such data it is not possible to deliver the requested service. Providing optional data (e.g. additional personal details) does not affect access to the service.

8. Changes to this notice

Dolidays Srl may periodically update this notice, for example following regulatory changes or the introduction of new services. Changes will be published on this page; users are encouraged to check it periodically.

Related documents

• Cookie Policy
• Terms and Conditions
• Right of withdrawal