The Data Controller of personal data is:
Mulas Giorgio
Corso Vittorio Emanuele, 30 – 08040 Ulassai (NU)
Email: info@ogliastraexperiences.it
Phone: +39 379 151 0016

The website https://ogliastraexperiences.it/ collects personal data voluntarily provided by users through:

Contact form, which may require name, surname, email address, phone number, and other details necessary to manage the request.
Direct contacts (links to mobile numbers or WhatsApp chats), which involve the direct communication of personal data by the user.
During normal browsing, certain technical data may also be automatically collected (such as IP address, browser type, operating system, pages visited). These are used in aggregated and anonymous form to ensure the correct functioning of the website.

The personal data provided will be processed exclusively for the following purposes:

• Managing information requests sent via contact form, email, phone, or WhatsApp.
• Managing bookings of the offered services and the subsequent organization and provision of the booked activities.
• Fulfilling legal, administrative, and fiscal obligations related to service delivery.

Data will not be used for marketing purposes nor disclosed to third parties for commercial use.

The processing of personal data is based on:

• The execution of pre-contractual or contractual measures requested by the data subject, in accordance with Art. 6(1)(b) of the GDPR.
• The fulfilment of legal obligations to which the controller is subject, in accordance with Art. 6(1)(c) of the GDPR.

Personal data are processed using electronic and/or paper means, with methods suitable to ensure security, confidentiality, and integrity, in full compliance with Regulation (EU) 2016/679 (GDPR).

Processing is carried out exclusively by the Data Controller or by persons specifically authorized by them.

Personal data will be retained only for the time strictly necessary to achieve the purposes for which they were collected, and specifically:

• Up to 12 months for simple information requests not followed by a booking.
• Up to 10 years for data related to bookings, invoicing, and contractual relationships, in compliance with civil and fiscal obligations.

Personal data will not be disseminated. They may be communicated only to:

• Persons or entities providing support services to the Data Controller (e.g., accounting, fiscal, or legal consultants), strictly to the extent necessary and, where applicable, appointed as Data Processors.
  
• Public authorities or other entities when required by law or regulation.

Users may exercise at any time the rights provided for under Articles 15–22 of the GDPR, including:

• The right of access to their personal data;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure of data (“right to be forgotten”) where permitted by law;
• The right to restriction of processing;
• The right to object to processing;
• The right to data portability.

To exercise these rights, users may contact the Data Controller at the contact details provided above.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali,www.garanteprivacy.it).

Personal data are not transferred to countries outside the European Union.
Should such a transfer become necessary, it will be carried out in full compliance with Articles 44 et seq. of the GDPR.

The website may use technical cookies necessary for the proper functioning of its pages.

The possible use of third-party cookies (e.g., maps, embedded videos, or social media content) will be governed by the respective privacy policies of those providers.

Further details are available in the Cookie Policy.

This privacy notice is updated as of November 7, 2025, and may be subject to changes.
Any updates will be published on this page.