Privacy Policy

This notice describes how the personal data of users who browse this site or send requests through the contact forms is processed, pursuant to Regulation (EU) 2016/679 (GDPR).

Data controller

The data controller is G.S.H. Global Solutions Hospitality S.r.l., with registered office at Via Nino Bixio 8, 96100 Siracusa (SR), VAT 02120780891. For any request you can write to booking@gshlist.com.

Data processed

We process the data you voluntarily provide through the contact form (full name, company, email, phone, assignment location, number of people, requested accommodation type and message content), and technical data automatically collected by our hosting provider for security purposes (IP address, date and time of access).

Purposes and legal basis

Data is processed to respond to requests and provide quotes (pre-contractual measures) and to comply with legal obligations. Providing data in the form is optional but necessary to receive a reply.

Recipients of data

To send the emails generated by the contact form, we rely on Resend (Plus Five Five, Inc.), a US-based email delivery provider acting as data processor. We do not share your data with third parties for marketing or advertising purposes.

Data transfers outside the EU

Since Resend is based in the United States, sending emails through this provider involves a transfer of your data outside the European Economic Area, carried out on the basis of the Standard Contractual Clauses approved by the European Commission. As we also work with companies and partners located outside the European Union, we may need to transfer personal data in these contexts as well, always applying the safeguards required by Articles 44 et seq. of the GDPR.

Retention

Data is kept for as long as necessary to handle the request and to meet legal obligations, after which it is deleted or anonymised.

Your rights

You may at any time exercise the rights of access, rectification, erasure, restriction, portability and objection, by writing to booking@gshlist.com. You also have the right to lodge a complaint with the data protection authority.