Privacy Notice

Last updated: July 2026

1.Data Controller

The Data Controller for personal data collected through this website is Sicily Tourism Srls, trading as Best Way Hotel Solution Group, registered office at Via Carico 76, 95024 Acireale (CT), Italy — VAT No. 05600630874.

For any request regarding the processing of personal data, the Data Controller can be contacted at info@bestwayhotelsolution.com or by phone at +39 327 626 3088, +39 377 227 2564, +39 348 319 9958.

2.Data collected

Through the contact forms on this website (the "Contact" form and the dedicated "Investors" form) we collect the following data, provided directly by the user:

Data	Form	Required
Full name	Contact / Investors	Yes
Email address	Contact / Investors	Yes
Phone number	Contact / Investors	No
Property, company or fund	Contact / Investors	No
Area of interest / type of request	Contact / Investors	No
Message content	Contact / Investors	Yes

The website also automatically collects certain technical browsing data (IP address, browser type, pages visited) through cookies and similar tools, governed by the separate Cookie Policy.

3.Purpose and legal basis of processing

Data collected through the contact forms is processed for the following purposes:

• Responding to information requests sent through the website and managing the resulting correspondence — legal basis: performance of pre-contractual measures taken at the data subject's request (Art. 6.1.b GDPR) and the data subject's consent (Art. 6.1.a GDPR), given via the consent checkbox on the form;
• Evaluating opportunities for collaboration, management or investment, for users who use the dedicated investors form — legal basis: performance of pre-contractual measures (Art. 6.1.b GDPR);
• Complying with legal obligations, where applicable — legal basis: legal obligation (Art. 6.1.c GDPR).

Data is not used for direct marketing purposes, unless specific and separate consent is requested in the future.

4.Nature of data provision

Providing the data marked as required is necessary in order to process the request. Failure to provide this data makes it impossible to respond to the request. Providing the other data is optional and not providing it does not affect the ability to receive a response.

5.Processing methods and security measures

Processing is carried out using IT and telecommunications tools, following logic strictly related to the stated purposes and in a manner that ensures the security and confidentiality of the data. The Data Controller adopts appropriate technical and organizational measures to protect data from unauthorized access, loss, destruction or disclosure.

6.Data retention period

Data collected through the contact forms is retained for as long as necessary to handle the request and, subsequently, for the period required by applicable legal obligations or, in the absence of a resulting business relationship, for a maximum of 24 months from the last contact, after which the data is deleted or anonymized.

7.Data disclosure and transfer

Personal data may be disclosed to third parties that provide services instrumental to the Data Controller's business (for example: hosting providers, email service providers, or business contact management providers), appointed as data processors pursuant to Art. 28 GDPR where required by law. The data is not disseminated to the public.

Should any of the above providers be based outside the European Economic Area, data transfers will take place in compliance with the safeguards set out in Chapter V of the GDPR (for example, through standard contractual clauses approved by the European Commission).

8.Data subject rights

As a data subject, you have the right to request from the Data Controller, at any time:

• access to your personal data (Art. 15 GDPR);
• rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR);
• erasure of data, in the cases provided for by law (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability, where technically possible (Art. 20 GDPR);
• objection to processing, in whole or in part (Art. 21 GDPR);
• withdrawal of consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

To exercise these rights, you can write to info@bestwayhotelsolution.com.

9.Complaints to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority, based at Piazza Venezia 11, 00187 Rome, Italy, or with the supervisory authority of the EU member state where you habitually reside.

10.Changes to this notice

The Data Controller reserves the right to modify or update this notice, in whole or in part, including as a result of regulatory changes. Any changes will be published on this page along with the date of the last update.