Last updated: 09/09/2026
The data controller is Lavika Loft, located in Catania (CT), Italy. For any information regarding the processing of your personal data, you can contact us at the email address shown in the site footer.
We collect the following categories of personal data:
Voluntarily provided data: first name, last name, email, phone number, and notes entered in the booking form.
Navigation data: IP address (anonymized via hash), browser type, operating system, screen resolution, pages visited, session duration. This data is collected anonymously and in aggregate through our internal analytics system.
Cookies: we use technical, analytics, and marketing cookies. For more details, see our Cookie Policy.
Your data is processed for the following purposes:
Booking management: processing and responding to booking requests submitted through the contact form.
Service communications: sending you confirmations, updates, and information about your booking.
Service improvement: anonymous statistical analysis of site usage to improve user experience.
Marketing (with consent): sending promotional communications only with your explicit consent.
Data processing is based on: contract performance or pre-contractual measures (booking), legitimate interest (anonymized analytics, site security), explicit consent (analytics cookies, marketing).
Booking data is retained for a maximum of 24 months from the stay date. Anonymized navigation data is retained for 12 months. You can request deletion of your data at any time.
Your personal data is not sold to third parties. It may be shared with: technical service providers (hosting, transactional email), competent authorities when required by law, third-party analytics services (Google Analytics, Facebook Pixel) only with your explicit consent.
Under the GDPR (EU Regulation 2016/679), you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, withdraw consent at any time.
To exercise these rights, contact us at the email address shown in the site footer.
We adopt appropriate technical and organizational measures to protect your personal data, including: encrypted connections (HTTPS), IP address hashing for analytics, CSRF protection on forms, admin passwords encrypted with secure hashing.
We reserve the right to update this privacy notice. Changes will be published on this page with the date of the last update.