Privacy Policy
Last updated: 30 March 2026
This notice describes how Orosei Servizi e Turismo SRLs, with its registered office at Via Santa Veronica 24, 08028 Orosei (NU), Italy, VAT number 01445870916, email info@dommos.it, telephone +39 346 5393009 (hereinafter, the “Data Controller”), processes the personal data of users of the website www.dommos.it, of customers who request information or make direct bookings, as well as of guests staying at the facilities managed, promoted or marketed by the Data Controller.
This information is provided in accordance with Article 13 of Regulation (EU) 2016/679 (“GDPR”).
1. Data controller
The data controller is:
Orosei Services and Tourism SRLs
24 Via Santa Veronica
08028 Orosei (NU), Italy
E-mail: info@dommos.it
Telephone: +39 346 5393009
“Data controller” means the entity that determines the purposes and means of the processing of personal data. The Personal Data Protection Authority, on the other hand, is the Italian independent administrative authority that supervises the application of privacy regulations.
2. Types of data processed
The Controller may process the following categories of personal data, as appropriate:
• identifying and personal data, such as first name, last name, date and place of birth, nationality;
• contact details, such as email address, telephone number, home or registered address;
• data relating to the information request, quote, booking and stay, such as arrival and departure dates, number of guests, booked property, special requests, additional services;
• data necessary for the management of payment and the related transaction;
• data contained in identity documents or otherwise necessary for check-in and for compliance with applicable regulations;
• data provided voluntarily by the user via website forms, email, telephone, messaging systems, online check-in or other contact channels;
• navigation data, cookies, and other tracking tools, as indicated in the Cookie Policy.
The Data Controller only processes relevant and necessary data for the purposes indicated in this notice, in compliance with the principles of lawfulness, fairness, transparency, and data minimisation.
3. Purpose of processing and legal bases
a) Management of information requests and quotations
The data is processed to respond to requests sent via the website, email, telephone, messaging or other contact channels, as well as to prepare quotes and provide information on stays and services.
Legal basis: execution of pre-contractual measures requested by the data subject.
b) Management of direct booking and the contractual relationship
The data are processed to confirm the booking, manage payments, organise the stay, send operational communications, provide assistance, manage changes or cancellations, allow check-in and check-out, as well as for any activity connected to the performance of the requested service.
Legal basis: performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
c) Fulfillment of legal obligations
The data is processed to fulfil obligations under applicable regulations, including civil, tax, accounting, and administrative obligations, and, where applicable, obligations relating to guest identification and the communication of data to competent authorities.
Legal basis: performance of legal obligations to which the Controller is subject.
d) Protection of the Controller's rights
The data may be processed to ascertain, exercise, or defend a right of the Data Controller in judicial or out-of-court proceedings, as well as to manage complaints, disputes, debt recovery, fraud, abuse, or improper use of the services.
Legal basis: The Data Controller's legitimate interest in protecting their business and rights, within the limits permitted by applicable legislation.
e) Sending promotional and commercial communications
With the specific consent of the data subject, the data may be used to send newsletters, commercial offers, promotional updates, communications about future stays or services of the Data Controller.
Legal basis: consent of the data subject. Consent may be withdrawn at any time.
f) Commercial profiling, remarketing and personalisation of communications
Once such activities are activated, and always in compliance with applicable regulations, the Data Controller may process the user's data to analyse preferences, interactions, interests or browsing behaviour and to propose content, offers or advertisements that are more in line with the user's profile, including through remarketing tools.
Legal basis: consent of the data subject, where required by applicable legislation and rules on cookies and other tracking devices.
4. Nature of data provision
The provision of the requested data for pre-contractual, contractual, and legal purposes is necessary. Failure to provide it may result in the inability to respond to your requests, provide a quote, conclude or manage a booking, allow for your stay, or comply with legal obligations.
In particular, the provision of data necessary for guest identification, check-in, and purposes related to their stay is essential for the provision of the service.
The provision of data for marketing, profiling or remarketing purposes is, however, optional and the absence of consent does not affect the ability to use the Data Controller's main services.
5. Treatment modalities and safety
Treatment is carried out using paper, IT, and telematic tools, according to logic strictly related to the indicated purposes and with technical and organisational measures adequate to protect personal data from unauthorised access, loss, destruction, alteration, improper disclosure, or unlawful use.
Such measures are defined taking into account the nature of the data processed, the methods of processing, and the associated risks. It is understood that no computer system or data transmission method can guarantee absolute security.
The Personal Data Protection Authority has also drawn the attention of the hospitality sector to the need to protect guest identification documents and the systems used for check-in and booking management with particular care.
6. Collection of data for check-in and identification documents
In the context of managing the stay, the Owner may request guests to provide the data and documents necessary for check-in, for the identification of lodgers, and for compliance with applicable regulations.
The collection of such data may take place, depending on the case, via management software, booking engine, online check-in platforms, digital forms, e-mail, messaging, or other channels indicated by the Data Controller. The user is invited to preferably use the channels expressly indicated by the establishment.
Providing the data necessary for check-in and guest identification is an essential requirement for the correct execution of the stay. In the absence of the requested data, the Data Controller may not be able to allow access to the facility or provide the service.
7. Recipients of personal data
Personal data may be communicated, within strictly necessary limits, to:
• Internal personnel authorised by the Data Controller;
• Administrative, tax, accounting, IT, and legal consultants;
• Technology and digital service providers, including but not limited to hosting, website management, booking engines, PMS, channel managers, online check-in, cloud storage, and technical support and system maintenance.;
• payment service providers, banks, payment schemes and financial intermediaries;
• parties providing services connected with the management of the stay or booking;
• public authorities, bodies, offices or organisations to whom communication is mandatory by law or by order of an authority.
These subjects may act, as the case may be, as independent data controllers or as data processors duly appointed pursuant to Article 28 GDPR.
8. Transfer of data to third countries
Where technical suppliers or digital services used by the Controller involve data transfers to countries outside the European Economic Area, such transfers will take place in compliance with the safeguards provided by the GDPR, including, where applicable, adequacy decisions or standard contractual clauses.
9. Retention periods
Personal data is stored for the time strictly necessary to pursue the purposes for which it is collected and, subsequently, for the period required by legal obligations or necessary for the protection of the Controller's rights.
In particular:
The data relating to contact requests and quotes are kept for the time necessary to manage the request and, where appropriate, for a subsequent reasonable period connected to any developments in the negotiation.;
• Data relating to bookings, stays, payments and administrative documentation are kept for the duration of the contractual relationship and for the subsequent terms required by civil, tax, accounting and administrative regulations;
• data processed for legal obligations are retained for the period laid down by applicable regulations;
• Data processed for marketing, profiling, or remarketing purposes will be retained until consent is revoked or until a different deadline is otherwise indicated in specific policies or the cookie policy, without prejudice to the data subject's right to object or withdraw consent at any time.
10. Cookies and other tracking tools
The site may use technical cookies, analytics cookies, and, where activated, marketing, profiling, or remarketing cookies, either first-party or third-party.
Technical cookies are used for the correct functioning of the site and for the provision of requested services. For tracking tools other than technical ones, processing is carried out in compliance with applicable legislation and the indications provided by the Data Protection Authority in its guidelines on cookies and other tracking tools.
For more information on the cookies used, their purposes, retention periods, and how to give, refuse, or withdraw consent, users are invited to consult the website's Cookie Policy.
11. Link to third-party sites or services
The website, the Data Controller's communications, or the booking flow may contain links to third-party websites, platforms, or services. Such entities operate according to their own privacy policies and terms, for which the Data Controller assumes no responsibility.
12. Data subject rights
In cases provided for by applicable legislation, the data subject may exercise the rights provided for by Articles 15-22 GDPR, including:
• obtain confirmation of the existence or non-existence of personal data concerning him/her;
• access their personal data;
• ask for the correction of inaccurate data or the supplementation of incomplete data;
• request the deletion of data in the cases provided for;
• obtain a restriction of processing in the cases provided for;
• object to processing, where applicable;
• receive data in a structured format and, where technically feasible, request its transmission to another controller in the cases provided for;
• withdraw consent at any time, for treatments based on consent, without prejudice to the lawfulness of the processing carried out before withdrawal.
To exercise their rights, the data subject can contact the Data Controller at the following address: info@dommos.it.
13. Complaint to the supervisory authority
The data subject who believes that the processing of their data is in violation of the applicable legislation may lodge a complaint with the Personal Data Protection Authority, in accordance with the procedures indicated by the Authority itself.
14. Changes to this notice
The Data Controller reserves the right to update or amend this Privacy Policy at any time, also in light of regulatory, organisational, technological, or operational changes. The updated version will be published on this page, indicating the date of the last update.
English 
Italian 
German