Skip to content
Search
Sorrento Web

The guide to the Sorrento Peninsula since 1999

Type at least two letters. Press Enter to see all results.

Privacy policy

Under Articles 13 and 14 of EU Regulation 2016/679 (GDPR), this notice explains which personal data we process when you use the website www.sorrentoweb.com, the SorrentoWeb app for iPhone and Android and the reserved area for businesses, why we process them and what your rights are. We collect as little as possible: you do not need to register to browse the website or the app.

Data controller

The data controller is Mda Informatica S.a.s., Via Iommella Piccola 80, 80065 Sant'Agnello (NA), Italy, VAT number IT03360701217, publisher of Sorrento Web. For any privacy question you can write to info@sorrentoweb.com.

What data we process and why

  • Browsing and security (website and app). When your browser or the app connects to www.sorrentoweb.com, the server automatically records the IP address, date and time, the page or content requested and the type of device. This keeps the service running, protects it from abuse and helps us investigate problems. Legal basis: our legitimate interest in security (Art. 6.1 f).
  • Contact form. Name, email, telephone (optional) and your message, so that we can reply. Legal basis: your request (Art. 6.1 b).
  • Requests from businesses ("List your business" page: claiming a listing or proposing a new one). Name, role, company, VAT number, email, telephone, website, the details of the business and your message, to check that you may manage the listing, give you access to the reserved area and publish the listing. Legal basis: pre-contractual measures and contract (Art. 6.1 b).
  • Submit an event. The organiser's details (name, role, organisation or company, VAT number, email, telephone, website) and the event details, to assess and publish it. If approved, the event details become public; your contact details do not. Legal basis: your request (Art. 6.1 b).
  • Reserved area for businesses. Email, name and password (stored encrypted, nobody can read it), the access log with IP address and the history of changes to listings, to manage your account and protect it from unauthorised access. Legal basis: contract (Art. 6.1 b) and legitimate interest in security (Art. 6.1 f).
  • Website statistics. Only if you accept in the cookie banner, Google Analytics collects aggregated data on the pages visited, the type of device and where the visit came from. Legal basis: your consent (Art. 6.1 a), which you can withdraw at any time from the Cookies page.
  • Anonymous visit count. To know how many people use the website and which listings are viewed and contacted, our server counts the pages opened, where the visit came from, the type of device and clicks on listing contacts, without cookies and without storing the IP address: to recognise the same visitor within a day it uses an encrypted fingerprint, deleted at the end of the day. Only anonymous totals remain, which we see and, for their own listing, the business that manages it. Legal basis: our legitimate interest in measuring the service (Art. 6.1 f).
  • Favourites and preferences. Places saved with the heart, the chosen language and your cookie choice stay only on your device (browser or app storage) and are not sent to us.

The SorrentoWeb app

The app shows the same content as the website (accommodation, restaurants, guide and events) and downloads it from www.sorrentoweb.com, keeping a copy on the phone so that it also works offline.

  • No account and no tracking. The app does not ask you to register, shows no advertising, uses no profiling tools and does not track you across other apps or websites. We do not use the phone's advertising identifier.
  • Anonymous statistics, only with your consent. On first launch the app asks whether you would like to help us improve it. If you say yes, it counts which pages you open and which contact buttons you use (telephone, WhatsApp, email, website, directions, favourites, sharing), together with the language, app version, system (iPhone or Android) and the country set on the phone, with a random code created when you give consent. The data passes through our server, which forwards it to Google Analytics (Google Ireland Ltd.) without your IP address, and is used only to understand how the app is used and to show businesses, in aggregate, how many people contact them. Legal basis: your consent (Art. 6.1 a). If you say no, the app only sends anonymous counts without any code (pages and contacts, system and language), which stay on our server as totals, as for the website; you can change your mind at any time in the app's Profile, and saying no deletes the random code.
  • Connection to the website. To update its content the app connects to www.sorrentoweb.com: as for any website visit, the server records the IP address and the request (see "Browsing and security").
  • Location. Only if you tap "Near me" and grant permission, the app uses the phone's location to show you what is nearby on the map. Your location stays on the phone: it is neither sent to us nor stored. You can deny or withdraw the permission at any time in the phone's Settings and the app keeps working.
  • Favourites and language. They stay in the phone's storage and are deleted when you uninstall the app.
  • Maps. Maps are provided by the phone's system (Apple Maps on iPhone, Google Maps on Android), which receives the requests needed to display them under its own privacy policy. The "Directions" button opens the phone's maps app.
  • Telephone, WhatsApp, email, websites and bookings. These buttons open third-party apps or websites (the businesses, WhatsApp, your email app): from that moment the privacy policy of whoever runs them applies.
  • App updates. Fixes and improvements to the app come from the servers of Expo (650 Industries, Inc., United States), the technical service the app is built with: to deliver them they receive the IP address, the app version, the type of phone and a random code created by the app when it is installed, which is used only to deliver updates and is deleted when you uninstall the app. No personal data is used for any other purpose.
  • Downloads and updates from the App Store or Google Play. They are handled by Apple and Google as independent controllers, under their own privacy policies.

How long we keep the data

  • Contact form messages and event submissions: as long as needed to handle the request and in any case no longer than 24 months.
  • Requests from businesses: until the request is closed and no longer than 24 months if no relationship follows; if a relationship follows, for its duration and then for the period required by law for tax and contract records (10 years).
  • Reserved area accounts and their access log: while the account is active; when it is closed they are deleted, except for the history of changes to published listings.
  • Server technical logs: for the time strictly necessary for the security of the service; the logs of reserved area logins and of emails sent are deleted automatically after 12 months.
  • Google Analytics statistics: no longer than 14 months, after which Google deletes them.
  • Anonymous visit count: daily fingerprints are deleted at the end of the day; totals are kept for no longer than 400 days (listing totals 24 months).

Who can see the data

Only the controller and the providers who help us run the service, appointed as data processors: Aruba S.p.A. (website hosting and email, servers in Italy) and, only with your consent, Google Ireland Ltd. for website and app statistics. For the app there is also Expo (650 Industries, Inc.), which delivers updates. The maps on the guide pages come from OpenStreetMap: when you view them, your browser loads them from their servers. Data is never sold or passed on to third parties for commercial or advertising purposes.

Transfers outside the European Union

Website and app data is stored in Italy. Google Analytics statistics, if you accept them, may be transferred to the United States under the EU-US Data Privacy Framework recognised by the European Commission. App updates pass through Expo's servers in the United States, with the safeguards required by the GDPR (standard contractual clauses approved by the European Commission).

Bookings and contact with businesses

Sorrento Web does not handle bookings or payments and does not receive the messages you send to businesses: the "Book", telephone, WhatsApp and email buttons put you in direct contact with them, and they process your data as independent controllers under their own privacy policies.

Your rights

At any time you can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest; you can withdraw your consent to statistics without affecting processing already carried out. Write to info@sorrentoweb.com: we reply within one month. If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of your country.

Children

The website and the app can be browsed at any age, but the forms and the reserved area are not intended for children under 14: we do not knowingly collect data from minors.

Changes to this notice

If we change the way we process data, we update this page and the date at the bottom. We will also flag important changes on the website.

Last updated: 11/10/2026