Privacy Policy

The data controller is AF Digital di Andrea Fustaino, which runs the ElbaMyLove portal.

• Address: Via Puccini 55, 57034 Marina di Campo (LI), Italy
• VAT number: IT02023910496
• Email: info@elbamylove.com
• Phone: +39 324 632 8521

For any question about this notice or your data, write to info@elbamylove.com.

ElbaMyLove presents accommodation, restaurants, activities and services on the Island of Elba and puts you in direct contact with them. We do not sell stays, handle payments or confirm bookings: the reply, the price and any booking remain between you and the property you choose.

That is why we process little data: what is needed to get your request to those who can answer it, to send you the newsletter if you ask for it, and to keep the site running.

Browsing the site

When you open a page, the server records technical data: IP address, date and time, page requested, browser and operating system. We need it to run the site, protect it from abuse and fix errors. Legal basis: our legitimate interest in the security and operation of the service (Art. 6(1)(f) GDPR).

Quote request

With the "Request a quote" form you give us your first name, surname, email, phone number (optional), travel dates, number of guests and children's ages, pets, area and type of accommodation, board and notes. We forward the request to the accommodation listed on the portal that matches the area and type you chose, so they can reply with an offer. We keep a copy of the request and your contact details in our archive. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

The properties that receive the request use it to reply to you and, from then on, act as independent controllers for the relationship they start with you: they may contact you by email, phone or other channels that ElbaMyLove does not control.

Direct request to a property

On the pages of hotels, apartments, restaurants, excursions and shops you can write directly to the business: first name, surname, email, phone, country, dates, guests and message. The request is emailed only to that business, which replies to you directly; ElbaMyLove receives a copy for checks and support, and you receive a confirmation email. Only ElbaMyLove's copy also shows the IP address, browser and operating system it was sent from, to spot automated submissions and abuse: the business does not receive them. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR); for technical data, our legitimate interest in security (Art. 6(1)(f)).

Newsletter

You subscribe with the form at the bottom of the pages or by ticking the optional box in the quote form. We use your email address and, if you gave them in the quote form, your name and phone number to send you offers, events and news from the Island of Elba. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the link at the end of every email or by writing to us. Without the tick, a quote request does not subscribe you to anything.

Direct contacts from listings

If you call, write on WhatsApp, send an email or open a property's website from the buttons on its page, the conversation takes place directly with the property, outside the portal. We only count how many times each button is used, without personal data, to show the property how many contacts reach it through the portal.

Favourites

The favourites you save with the heart stay in your browser only, in the device's local storage: we do not receive them or link them to you.

Statistics and marketing

Only if you accept them in the banner do we use Google Analytics 4 (statistics) and Meta Pixel (marketing). All the details are in the cookie policy. Legal basis: your consent (Art. 6(1)(a) GDPR).

If you are a business

With the "Promote your business" form you give us your details and those of your business: name, email, phone, tax details and chosen package. We use them to contact you, prepare your listing and manage the business relationship. Legal basis: pre-contractual steps and contract (Art. 6(1)(b) GDPR) and legal tax obligations (Art. 6(1)(c)).

To show you icons, maps and weather, some pages load files from other companies' servers. Your browser connects to those servers, which receive your IP address; they do not set cookies.

• jsDelivr and unpkg: icons and map libraries.
• OpenStreetMap: the maps of beaches, places, towns and properties.
• Open-Meteo: the weather forecasts on the weather and beach pages.

Legal basis: our legitimate interest in offering a complete and fast site (Art. 6(1)(f) GDPR).

YouTube videos and the Traghettilines ferry booking form (Misterferry in the English, German and French versions), on the other hand, set their own cookies: that is why they only load if you allow "External content" in the banner, or from the box you find in their place.

We do not sell your data or pass it on for other people's advertising. It is received only by:

• the properties you write to, or that match your quote request, so they can reply;
• the suppliers that run the portal, appointed as data processors: IONOS SE (Germany), which hosts the site on its Frankfurt servers, Brevo (Sendinblue SAS, France) for sending request emails and MailUp S.p.A. (Italy) for the newsletter;
• Google and Meta, only if you accept statistics or marketing cookies;
• public authorities, only where the law requires it.

IONOS, Brevo and MailUp process data in the European Union. Google and Meta, if you accept their cookies, may transfer data to the United States: they participate in the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023, and use the standard contractual clauses approved by the Commission.

The technical resources in the "External services" section may come from server networks distributed worldwide: they only receive the IP address needed to deliver the file.

The properties that receive your requests keep data according to their own rules: ask them directly to find out.

At any time you can ask us to:

• tell you what data we hold about you and give you a copy (Art. 15 GDPR);
• correct it (Art. 16) or delete it (Art. 17);
• restrict its use (Art. 18);
• give it to you in a readable format so you can take it elsewhere (Art. 20);
• stop processing based on legitimate interest (Art. 21);
• withdraw your consent to the newsletter and cookies, without affecting what was done before.

Write to info@elbamylove.com: we reply within one month. For cookies, just use the "Cookie Preferences" link at the bottom of every page.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority in your country.

To send a request or subscribe to the newsletter you must be at least 16, as the privacy box in the forms states. If we find out that we have received data from a younger person without the consent of whoever holds parental responsibility, we delete it.

The site uses encrypted connections (HTTPS) and access to data is limited to those who need it for their work.

We update this notice when the portal's features or the law change: the date at the top of the page shows the version in force. If the cookies we use change, we will ask for your consent again.