Privacy Policy
© 2024 Dagius Experience

Last updated: 18 March 2026

Privacy Policy

Pursuant to Articles 13-14 of EU Regulation 2016/679 (GDPR).

1. Data Controller

The Data Controller is DS.GM. Corporation S.r.l., registered office at Via Modugno 18, Palo del Colle (BA), Italy.

For any questions regarding personal data protection, contact us at:

  • Email: info@dagius.com
  • Address: Via Modugno 18, 70027 Palo del Colle (BA), Italy

2. Categories of Data Collected

We collect and process the following categories of personal data:

Category Data Purpose
Authentication dataName, email, profile picture (Google OAuth)Account creation and management
Browsing dataAnonymised IP, browser, OS, pages visited, session durationAggregate statistics, site security
Usage dataSearches, properties viewed, language preferencesPersonalisation of user experience
Contact dataName, email, phone (if provided via contact form)Response to information requests

3. Purposes and Legal Basis

Purpose Legal basis
Provision of search and booking servicesPerformance of contract (Art. 6.1.b GDPR)
Authentication and account managementConsent (Art. 6.1.a GDPR)
Anonymised statistics and site improvementLegitimate interest (Art. 6.1.f GDPR)
Marketing communicationsConsent (Art. 6.1.a GDPR)
Compliance with legal obligationsLegal obligation (Art. 6.1.c GDPR)

4. Cookie Policy

The site uses cookies and similar technologies. You can manage your preferences via the cookie banner or the floating cookie button on the bottom left.

Name Provider Purpose Duration Type
dagius_sessionDagiusUser authenticationSessionNecessary
dagius_cookie_preferencesDagiusCookie consent preferences12 monthsNecessary
_dagius_analyticsDagiusAnonymised browsing statistics24 hoursAnalytics
SM_* (Little Hotelier)Direct-book.comBooking engineSessionNecessary (3rd party)

5. Recipients of Data

Your personal data may be shared with:

  • Sanity Inc. (San Francisco, USA) – CMS provider, with adequate safeguards via EU standard contractual clauses
  • Little Hotelier / SiteMinder – booking management platform
  • Google LLC – OAuth 2.0 authentication services
  • Hosting provider – for service delivery
  • Competent authorities – where required by law

Data is never sold to third parties or shared for third-party marketing purposes.

6. Transfers Outside the EEA

Some providers (e.g. Google, Sanity) are based in the United States. Transfers are covered by:

  • Standard contractual clauses approved by the European Commission (Art. 46 GDPR)
  • EU-U.S. Data Privacy Framework, where applicable

7. Retention Periods

Data categoryRetention period
User account dataUntil account deletion + 30 days
Browsing data (aggregated)Maximum 24 months
Booking data10 years (legal/fiscal obligations)
Email communications3 years from receipt
Cookie preferences12 months

8. Your Rights (GDPR Arts. 15-22)

As a data subject, you have the right to:

Access (Art. 15)

Obtain confirmation of processing and a copy of your data

Rectification (Art. 16)

Correct inaccurate or incomplete data

Erasure (Art. 17)

Request deletion ("right to be forgotten")

Restriction (Art. 18)

Restrict processing in certain cases

Portability (Art. 20)

Receive data in structured, machine-readable format

Objection (Art. 21)

Object to processing based on legitimate interest

Withdraw consent

Withdraw consent at any time without affecting prior processing

Lodge a complaint

File a complaint with the Italian Data Protection Authority (Garante)

To exercise your rights, write to info@dagius.com. We will respond within 30 days.

Italian Data Protection Authority (Garante): www.garanteprivacy.it

9. Security

We implement appropriate technical and organisational measures to protect personal data:

  • HTTPS/TLS encrypted connections across the entire site
  • Data access restricted to authorised staff
  • Secure authentication via OAuth 2.0 standard
  • HTTP security headers (CSP, X-Content-Type-Options, Referrer-Policy)
  • Periodic security reviews

10. Minors

The service is not intended for users under 16 years of age. We do not knowingly collect personal data from minors. If you believe your child has provided personal data, contact us at info@dagius.com.

11. Changes to this Policy

This policy may be updated periodically. Significant changes will be communicated via notice on the site or by email. The date at the top indicates the last revision.