1. Data Controller

Sky Travel — Tourism concierge intermediary
Contact: skytravel.sardegna@gmail.com

2. Data Collected

We collect: name, email, phone number, stay dates, and payment data (processed by Stripe).

3. Legal Basis

• Contract performance (Art. 6.1.b GDPR): booking processing
• Legitimate interest (Art. 6.1.f GDPR): service improvement
• Legal obligation (Art. 6.1.c GDPR): accounting records

4. Data Recipients

Data may be shared with: Supabase (database), Vercel (hosting), Stripe (payments). We never sell your data.

5. International Transfers

Vercel and Stripe are US-based. Transfers are covered by EU Standard Contractual Clauses (Art. 46 GDPR).

6. Your Rights (GDPR)

You have the right to: access, rectification, deletion, restriction, portability, and objection. Contact: skytravel.sardegna@gmail.com

7. Supervisory Authority

You may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

8. Cookies

We use only technically necessary cookies. No advertising or third-party tracking cookies are used.