Privacy & Cookies Policy

Privacy Policy

1. Data Controller: The data controller is Nautilus Cr Srl, located at Via Ichnusa 24, 09043 Muravera SU, Italy. P.IVA: 04026790925, REA: CA-357528, Capitale Sociale: €10.000,00 i.v. You can contact us regarding your data at booking@naimcostarei.com or by certified email (PEC) at nautiluscr@legalmail.it.

2. Purpose of Data Collection: Personal data you provide when contacting us by email or phone, or when booking through our online booking engine (such as your name, contact details, stay dates, requests and the payment information needed to secure your reservation), is processed to respond to your enquiries and to manage your booking and stay. This data will not be used for marketing purposes or newsletter subscriptions without your explicit, separate consent.

3. Legal Basis: Processing for enquiries and bookings is based on taking steps at your request prior to entering into a contract, and on performing that contract (Art. 6.1.b GDPR). For legally mandated data transmissions (Alloggiati Web, ROSS 1000, tourist tax) and for tax and accounting records, processing is based on compliance with a legal obligation (Art. 6.1.c GDPR). Website analytics is based on your consent given through our cookie banner (Art. 6.1.a GDPR), which you can withdraw at any time. Keeping our website secure and working correctly is based on our legitimate interest (Art. 6.1.f GDPR). Providing your data is voluntary, but without it we may be unable to answer your enquiry or confirm your booking; providing identity data on arrival is mandatory by law.

4. Data Retention: Enquiries that do not lead to a booking are kept for up to 6 months. If a booking is made, data will be retained for 10 years for administrative and tax compliance as required by the Italian Civil Code. Analytics data is kept for no longer than 14 months.

5. Your Rights: You have the right to access, rectify, or request the deletion of your data at any time. You also have the right to restrict processing, the right to data portability, and the right to object to processing where it is based on legitimate interests. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at booking@naimcostarei.com or by certified email (PEC) at nautiluscr@legalmail.it; we will respond within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

6. Third Parties: We do not sell, share, or lease your personal data. We share it only with service providers who help us run the hotel and website, acting as data processors under written agreements in compliance with GDPR Art. 28: Ericsoft (our online booking engine, which processes booking and payment details together with its payment service providers), Aruba S.p.A. (website hosting, based in Italy), Google LLC (Google Analytics, only with your consent, and the Google Maps embed on our Contact page) and CookieYes (our cookie consent tool). We also share data with public authorities where required by law (see section 8). Your data is only accessed by authorised staff for the purpose of responding to you and managing your stay.

7. Cookies: This website uses Google Analytics 4, a web analytics service provided by Google LLC. Google Analytics collects anonymised data about how visitors interact with the site (such as pages visited, time spent, and general geographic region). IP addresses are anonymised by default and are never stored or logged by Google Analytics. Data is processed by Google LLC in accordance with its Privacy Policy and the EU–US Data Privacy Framework. You can opt out of Google Analytics tracking at any time by clicking “Cookie Settings” in the bottom corner of the screen, or by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout. For a full breakdown of cookies used on this website, please refer to the Cookie Policy below.

8.Hotel Specifics: For guests who proceed to book a stay, we are legally required by Italian law (Art. 109 TULPS) to collect and transmit guest identity data to the State Police (Alloggiati Web) and to the Regional Tourism Portal (ROSS 1000) as required by Sardinian regional law. Data is also processed for the collection of the Tourist Tax (Imposta di Soggiorno) for the Municipality of Muravera.

9. Transfers Outside the EU: Some data processed by Google LLC may be transferred to the United States. These transfers are covered by the EU–US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses.

10. Automated Decisions: We do not use your personal data for automated decision-making or profiling.

11. Updates: This policy was last updated on 5 October 2026.

Cookie Policy

This website uses cookies to function correctly (Technical Cookies) and to analyze our traffic (Analytics).

Technical Cookies: Essential for the site to work correctly. These include session cookies (deleted when you close your browser), a cookie consent preference cookie (stores your choice for 12 months), and caching cookies set by our hosting provider Aruba. These cannot be disabled without affecting site functionality.
Analytics Cookies: We use Google Analytics 4 to understand visitor behaviour. These are only active if you click “Accept” on our banner. Analytics cookies set by Google Analytics (_ga and ga*) persist for up to 2 years.
Third-Party Content: Our Contact page includes an embedded Google Map. When the map loads, Google may set cookies (such as NID, lasting up to 6 months) and receive your IP address, in accordance with Google’s Privacy Policy.
How to Manage: You can manage or withdraw your cookie consent at any time by clicking the “Cookie Settings” icon in the bottom corner of the screen, or through your browser settings.