Privacy Policy

Last Updated: 30/06/2026

At Sunny Stays ("we", "our", or "us"), we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, make an enquiry or book accommodation with us.

By using our website, you agree to the practices described in this Privacy Policy.

Who we are

Sunny Stays provides holiday accommodation in Gozo, Malta. We are responsible for processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Contact Details

Sunny Stays
Triq Karlu Galea
Victoria, Gozo
VCT 2603
Malta

Email: info@sunnystays.mt

What information we collect

Depending on how you interact with our website or services, we may collect the following information:

Personal information

Full name
Email address
Telephone number
Nationality (where required for bookings)
Booking details
Arrival and departure dates
Number of guests
Special requests submitted by you

Technical information

When you browse our website, we may automatically collect:

IP address
Browser type and version
Device information
Pages visited
Website usage data
Cookies and similar technologies

How we use your information

We process your personal data to:

Respond to enquiries.
Manage and confirm bookings.
Communicate with you before, during and after your stay.
Provide customer support.
Improve our website and services.
Analyse website performance.
Comply with legal and regulatory obligations.
Prevent fraud and protect our business.

We only process your personal information where we have a lawful basis to do so.

Legal basis for processing

Under the GDPR, we process your personal data based on one or more of the following legal grounds:

Your consent.
Performance of a contract (such as processing your accommodation booking).
Compliance with legal obligations.
Our legitimate interests in operating and improving our business.

Cookies and Analytics

Our website uses cookies and similar technologies to improve your browsing experience.

These may include:

Essential cookies
Analytics cookies
Functional cookies
Marketing cookies

For more information, please refer to our Cookie Policy.

Sharing your information

We do not sell your personal information.

We may share your information only where necessary with trusted third parties, including:

Payment service providers
Booking management platforms
Website hosting providers
IT support providers
Marketing service providers
Legal or regulatory authorities where required by law

All third parties are required to process your data securely and only for authorised purposes.

International transfers

Where your personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Data security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction.

Although we strive to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

How long we keep your information

We retain your personal information only for as long as necessary to:

Provide our services.
Meet legal and accounting requirements.
Resolve disputes.
Enforce our agreements.

When your information is no longer required, it will be securely deleted or anonymised.

Your rights

Under the GDPR, you have the right to:

Access your personal information.
Request correction of inaccurate information.
Request deletion of your data where applicable.
Restrict the processing of your information.
Object to certain processing activities.
Request a copy of your data in a portable format.
Withdraw your consent where processing is based on consent.
Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us using the details below.

Third-Party links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any personal information.

Children's privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete the information.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements or website functionality.

The latest version will always be available on this page, together with the updated revision date.

Contact us

If you have any questions about this Privacy Policy or how we process your personal information, please contact us:

Sunny Stays

Triq Karlu Galea
Victoria, Gozo
VCT 2603
Malta

Email: info@sunnystays.mt

Data protection complaints

If you believe your personal information has not been handled correctly, you have the right to lodge a complaint with the competent data protection authority.

For users in Malta, this is the:

Information and Data Protection Commissioner (IDPC)
Level 2, Airways House
High Street
Sliema SLM 1549
Malta

Website: https://idpc.org.mt

‍