Privacy notice
Privacy Policy
How we process personal data collected through the website, the booking form and privacy preferences.
Last updated 2026-04-21
This notice explains how Kora Beach Club processes personal data collected through the website.
Processing is carried out in compliance with Regulation (EU) 2016/679 (GDPR), applicable Italian legislation and the rules that apply to online services using cookies and tracking technologies.
Data controller
Kora Beach Club
Sede o recapito: Lungomare destro, Policoro (MT), Italia
Email privacy: privacy@korabeachclub.net
Email contatto generale: info@korabeachclub.net
Telefono: +39 352 037 9963
P.IVA / identificativo fiscale: 01448300770
Categories of data processed
- Technical browsing data required for website operation, such as access logs, IP addresses and browser information.
- Data voluntarily provided by the user through the contact or booking form, such as name, email, phone number, preferred date, number of guests and notes.
- Preferences related to cookies and tracking technologies, including the choices expressed in the consent banner.
Purposes and legal bases
- To provide core website functionality and ensure security, service continuity and abuse prevention; legal basis: pre-contractual measures, legitimate interest and legal obligations.
- To manage contact and booking requests sent by the user; legal basis: pre-contractual measures requested by the data subject.
- To comply with legal, tax, administrative or defence obligations; legal basis: legal obligation and legitimate interest.
- To activate external content or non-essential technologies only where the user has given valid consent; legal basis: consent.
Processing methods
Data is processed using appropriate digital and organisational tools, with technical and procedural safeguards proportionate to the risk. Access is limited to authorised staff and appointed processors where applicable.
Data recipients
- Technology providers supporting hosting, infrastructure, maintenance or website development.
- Communication or messaging providers requested by the user, such as WhatsApp when opened by the user.
- Authorities or parties entitled to receive data where required by law.
Transfers outside the EU
Some third-party providers or external content activated with consent may involve transfers outside the EEA. Where required, the controller adopts appropriate safeguards such as adequacy decisions or standard contractual clauses.
Retention period
- Contact and booking requests are stored for the time necessary to manage the request and, unless otherwise required, for an indicative maximum period set in the legal settings.
- Evidence of cookie consent is stored for the period necessary to prove the expressed preference and comply with legal obligations.
- Technical security data is stored only for the time strictly required to protect the service, prevent abuse and manage incidents.
Your rights
- Access to personal data.
- Rectification or updating of inaccurate data.
- Erasure, restriction of processing or objection where applicable.
- Data portability where provided by Article 20 GDPR.
- Withdrawal of consent at any time for consent-based processing, without affecting processing carried out before the withdrawal.
- Complaint to the competent data protection authority.
How to exercise your rights
Per esercitare i tuoi diritti o richiedere informazioni puoi scrivere a privacy@korabeachclub.net.