Privacy notice
This page explains what data FindSardinia processes, why it is used and the choices available to you. Last updated: 20 August 2026.
Controller and contact
The data controller is Simone Riccetti. For privacy requests, contact privacy@findsardinia.com.
Browsing and security
The server processes technical data needed to deliver pages and protect the service, such as IP address, date, time, requested resource and browser information. The public website does not require a personal profile.
Planner and travel preferences
The planner uses the details you enter to produce the result you request. We do not store free text or children’s ages. We only record aggregate categories such as month, duration, total party size, arrival, car, interests and pace, together with the engine result.
On-site searches
We retain the search phrase and result count to understand what works and which content is missing. Email addresses, phone numbers and web addresses are automatically removed before storage. We do not associate the search with an IP address, cookie, account or session identifier.
Partner handoffs
When you ask to open an external offer, we create a random code and record the service, programme, language, source content, status and timestamps. If you selected them and the partner can use them, the link also includes destination, month, duration and number of adults to prepare the search. The link expires after 30 minutes. We do not add your name, email or payment data.
Purposes and legal bases
We process the data needed to answer your requests and provide the service. Security, abuse prevention and essential aggregate measurements rely on our legitimate interest in operating a reliable platform. Google Analytics and Travelpayouts Drive are activated only after the relevant consent. Affiliate handoffs remain available without optional tools and are created when you expressly ask to open an external service.
Recipients and transfers
Technical data may be processed by strictly necessary infrastructure providers. Google Ireland Limited receives measurement data only after Analytics consent. Travelpayouts receives data through Drive after specific consent or, together with the selected programme, when you choose to open the partner website. Any transfers outside the European Economic Area follow the safeguards described in the providers’ notices.
Retention
The privacy preference remains in your browser for 180 days. Google Analytics cookies are configured with a maximum lifetime of 180 days. Minimal planner and affiliate operational data is retained for 90 days and removed by the next daily cleanup. Technical security data is retained only as long as needed to detect abuse and operate the service.
Your rights
You may request access, correction, deletion, restriction and portability where applicable, and object to processing based on legitimate interests. You can withdraw consent at any time through Manage privacy and cookies. You may also complain to the Italian Data Protection Authority.
Automated decisions
The planner provides travel suggestions and does not make decisions with legal or similarly significant effects. Its result is advice for you to assess, and you can always choose a different option.
Stay22
Accommodation links go through Stay22 only when you choose to open them. They pass the destination and, where supplied, dates and guest numbers to prepare the search. Booking is completed on the named provider’s website. When you open the map, Stay22 receives the displayed location and, where supplied, dates and guest numbers for the search. The external Stay22 map receives technical browser data and may use cookies to measure visits and bookings. It loads only with your consent, which you can withdraw in privacy preferences.