Privacy Policy

The controller of personal data is Sunshine Resort.

Complete legal identification and contact details will be added before the official launch of the website.

Depending on the services used, we may collect your first and last name, email address, phone number, reservation details, stay dates, number of guests and any messages or requests you submit.

For payment administration, we may process transaction status, payment amount and technical transaction identifiers. Sunshine Resort does not store complete bank card details.

Personal data is used to manage reservations, communicate with guests, process and confirm payments, send stay-related notifications, handle requests and comply with legal obligations.

Processing may be based on the performance or preparation of a contract, compliance with legal obligations, legitimate interests or consent, depending on the circumstances.

Certain data may be shared with technical providers used for hosting, databases, payment processing, email delivery and infrastructure management.

Online payments are processed through Stripe, while email communications may be delivered using specialised providers such as Resend.

Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Subject to applicable law, you may request access, rectification, deletion, restriction of processing, data portability or object to certain processing activities.

You also have the right to lodge a complaint with the competent data protection authority.

Sunshine Resort uses reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

This policy may be updated periodically. The version published on the website is the version applicable at the time it is accessed.