Data Protection Policy

Casa Suli

Effective Date: April 21, 2025

Casa Suli (“we,” “us,” or “our”) is committed to protecting personal data and respecting the privacy of individuals who visit or interact with www.casasuli.com (the “Website”).

This Data Protection Policy explains how personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree No. 196/2003, as amended).

1. Scope of This Policy

This Policy applies to personal data collected through:

• Use of the Website

• Direct contact via email, WhatsApp, or social media

• Booking-related inquiries and communications

Casa Suli does not process accommodation bookings or payments directly through the Website. Bookings are handled via third-party platforms.

Certain services or features (such as e-commerce) may be reintroduced in the future and will be governed by separate or supplementary data protection notices when applicable.

2. Data Controller

The data controller responsible for processing personal data is:

Casa Suli
📍 Siracusa, Italy
📧 support@casasuli.com

3. Categories of Personal Data Processed

We may process the following categories of personal data:

3.1 Identification & Contact Data

• Name

• Email address

• Phone number

• Information voluntarily provided in messages or inquiries

3.2 Technical & Usage Data

• IP address

• Browser type and device information

• Operating system

• Website usage data (pages visited, interactions)

3.3 Communication & Consent Data

• Records of correspondence

• Consent preferences (where applicable)

Note:
Payment data, booking details, and identification documents required for accommodation stays are processed directly by third-party booking platforms and are not collected via this Website.

4. Purposes of Processing

Personal data is processed for the following purposes:

• Responding to inquiries and communications

• Providing information related to Casa Suli accommodation

• Managing direct booking or long-stay requests

• Operating, securing, and improving the Website

• Complying with applicable legal obligations

We do not carry out automated decision-making or profiling.

5. Legal Bases for Processing

Personal data is processed on the following legal bases under Article 6 GDPR:

• Consent – where you voluntarily provide information or agree to specific processing

• Legitimate interests – to operate and improve the Website, respond to inquiries, and ensure security

• Legal obligation – where processing is required by law

Where consent is the legal basis, it may be withdrawn at any time.

6. Data Sharing & Disclosure

Personal data may be shared only with:

6.1 Service Providers

Trusted third-party providers (e.g. website hosting, analytics services) acting as data processors under contractual confidentiality and GDPR obligations.

6.2 Legal Authorities

Where required by law or valid legal request.

6.3 Business Changes

In the event of a reorganisation, merger, or asset transfer, personal data may be transferred in compliance with GDPR requirements.

Casa Suli does not sell personal data.

7. Data Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure hosting and encryption where applicable

• Access controls and data minimisation

• Regular monitoring of systems and processes

No system can guarantee absolute security, but reasonable safeguards are maintained.

8. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfil the purposes described in this Policy

• Respond to inquiries

• Comply with legal obligations

Retention periods vary depending on data type and applicable law.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied, including:

• Standard Contractual Clauses approved by the European Commission

• Transfers to countries subject to adequacy decisions

10. Cookies & Tracking Technologies

The Website uses cookies and similar technologies for functionality and analytics.
Details on cookie usage and consent management are provided in the Cookie Policy.

11. Data Subject Rights

Under the GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Request erasure (where legally applicable)

• Restrict processing

• Receive data portability

• Object to processing based on legitimate interests

• Withdraw consent at any time

Requests can be made by contacting support@casasuli.com.

You also have the right to lodge a complaint with a competent data protection authority.

12. Data Protection Officer

Casa Suli is not legally required to appoint a Data Protection Officer (DPO).
For all data protection matters, please contact:

📧 support@casasuli.com

13. Updates to This Policy

This Data Protection Policy may be updated periodically to reflect changes in legal requirements or business operations. Updates will be published on this page with a revised effective date.

14. Contact

For any questions, requests, or concerns regarding personal data processing, contact:

📧 support@casasuli.com

By using the Website, you acknowledge that you have read and understood this Data Protection Policy.