Privacy Policy
Last updated: November 2026
This privacy notice explains how SiciliaHost processes the personal data of users who visit siciliahost.com, send a booking request, submit an event or use the host panel and management apps, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
The data controller is Alessandro Lo Verde, as the host who directly manages the properties advertised on this site. For any request about your personal data, write to [email protected].
What data we collect and why
When you book a stay we collect your name, email and booking details (dates, property, amount) to manage the booking and, where required by law, to report guest identity data to public-security authorities (the Alloggiati Web portal). If you create an account we also collect your preferred language, to personalise communications. We do not collect payment data: you pay the deposit directly to the host by bank transfer or PayPal, outside this site. To let you pay it we show you the payment details the host has given us (account holder, IBAN, PayPal.me link). If you write to a host with the site's chat we keep the messages and the dates and guests you give, to deliver them to the host and show you the conversation; the host sees your name and, only with a confirmed booking, your email. You see the host's phone and WhatsApp only with a confirmed booking.
Legal basis and retention
We process your data to perform the stay contract you enter into with us and to comply with public-security and tax obligations. We keep booking data for as long as tax and administrative rules require; account data is kept until you ask us to delete it.
Who we share your data with
Your data is processed with the help of providers acting as data processors: Google Firebase (authentication, storing booking data, sending notifications) and our email provider for confirmation emails. Your name, dates and booking amount are visible to the host of the property you book, who processes them to manage the stay and the deposit. If you pay with PayPal, the payment is subject to PayPal's privacy notice. We do not sell or share your data with third parties for commercial purposes.
Transfers outside the European Union
Some providers (Google Firebase) may process data on servers located outside the European Economic Area. In those cases the transfer relies on the European Commission's standard contractual clauses or other safeguards equivalent to those required by the GDPR.
Your rights
You can ask us at any time to access, correct, delete or restrict the processing of your data, and you can object to processing based on our legitimate interest. To exercise these rights, write to [email protected]. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Security and changes to this notice
We take appropriate technical and organisational measures to protect your data from unauthorised access. This notice may be updated; the date above shows the latest revision.
Artificial intelligence assistant
In the host panel and in the management app you can use an assistant based on artificial intelligence. When you use it we process the messages you write or dictate and the data of your homes that the assistant looks up in order to answer (bookings with the guest's name and dates, availability, amounts, expenses, supplies), to provide the service you requested (art. 6.1.b GDPR); guests' identity documents, Alloggiati credentials, contact details and emails are not processed. The messages and this data are sent to the provider of the artificial intelligence model, which acts as our data processor and uses them only to produce the answer; if the provider processes data outside the European Economic Area, the transfer takes place with the safeguards required by the GDPR (for example standard contractual clauses). Voice is processed by the voice service of your browser or device; only the text reaches us. There is no history: the conversation is deleted when you close it or press “New chat” and in any case within 3 days; we keep only aggregated usage counters (number of messages and tokens), without the content of the messages, for security and cost control, and the record of your consent for as long as it is needed to prove it. Changes to your data are made only after your explicit confirmation.
