Last updated: 05 Feb 2026

This Privacy & Cookie Policy explains how Porto Fiscardo (“we”, “us”, or “our”) collects, uses,
stores, and protects personal data when you use our website. This website represents
Porto Fiscardo Apartments and Zavalata Waterfront Apartments (together referred to as “the Properties”).

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

The data controller responsible for processing your personal data is:

Porto Fiscardo
Website: https://www.portofiscardo.com
Properties:

• Porto Fiscardo Apartments
• Zavalata Waterfront Apartments

Contact details are available on our website’s Contact page.

2. What Personal Data We Collect

a) Information You Provide

• Name and surname
• Email address
• Phone number
• Booking or enquiry details
• Any information you submit via contact or booking forms

b) Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address
• Browser type and device information
• Pages visited and interaction data
• Date and time of access

This data is collected via cookies and similar technologies.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and booking requests
• To manage reservations and guest communication
• To improve website performance and user experience
• To comply with legal and regulatory obligations
• To ensure website security and prevent fraud

We do not sell or rent your personal data.

4. Legal Basis for Processing (GDPR Article 6)

We process your data under one or more of the following lawful bases:

• Consent – where you have given clear permission
• Contractual necessity – to fulfil a booking or enquiry
• Legal obligation – to comply with applicable laws
• Legitimate interests – to operate and improve our services

5. Data Sharing & Third Parties

We may share your data only with trusted third parties where necessary, including:

• Website hosting providers
• Booking and payment service providers
• Analytics services (e.g. Google Analytics)

All third parties are required to process data securely and in accordance with GDPR.

6. International Data Transfers

Some third-party services may process data outside the EU. Where this occurs, appropriate safeguards are used,
such as Standard Contractual Clauses (SCCs) and GDPR-compliant data protection agreements.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply
with legal, tax, or regulatory requirements. When data is no longer required, it is securely deleted or anonymised.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

To exercise these rights, please contact us via the website.

9. Cookies & Tracking Technologies

a) What Are Cookies?

Cookies are small text files placed on your device to help the website function properly and improve user experience.

b) Types of Cookies We Use

• Strictly Necessary Cookies – essential for website functionality and security
• Analytics / Performance Cookies – help us understand site usage and improve performance (anonymised where possible)
• Functional Cookies – remember preferences such as language or region
• Third-Party Cookies – may be set by services such as maps, booking tools, or embedded content

Non-essential cookies are used only with your consent.

10. Cookie Consent & Management

When you visit our website, you are shown a cookie banner allowing you to accept all cookies, reject non-essential cookies,
or manage preferences. You can also control cookies via your browser settings. Disabling cookies may affect website functionality.

11. Third-Party Cookie Policies

Third-party services used on our website operate under their own privacy and cookie policies. We do not control these cookies.

12. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse,
alteration, or disclosure.

13. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

14. Contact & Complaints

If you have questions about this policy or how your data is handled, please contact us via the details on our website.
You also have the right to lodge a complaint with your local data protection authority.