Privacy Policy
Effective Date: April 21, 2025
Casa Suli & Shop Sicily (referred to as "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you interact with our website, services, and products. By accessing or using our website, you agree to the terms of this Privacy Policy.
1. Data Controller
The data controller responsible for your personal information is:
Casa Suli & Shop Sicily
Email: support@casasuli.com
2. Information We Collect
2.1 Personal Information
We may collect personal information that you provide directly to us, including but not limited to:
Full name
Email address
Phone number
Billing and shipping addresses
Payment information (processed securely via third-party payment processors)
Identification documents (for accommodation bookings, as required by Italian law)
2.2 Device and Usage Information
When you access our website, we may automatically collect information about your device and usage patterns, such as:
IP address
Browser type and version
Time zone settings
Operating system and platform
Pages visited and time spent on our website
2.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand user behaviour. You can manage your cookie preferences through your browser settings.
3. Legal Basis for Processing
We process your personal information based on the following legal grounds:
Contractual necessity: To fulfil our obligations under a contract with you, such as processing orders or managing accommodation bookings.
Legal obligation: To comply with legal requirements, including tax laws and guest registration mandates in Italy.
Legitimate interests: To improve our services, prevent fraud, and enhance user experience.
Consent: Where required, we will obtain your explicit consent before processing your personal information.
4. How We Use Your Information
We use the information we collect for various purposes, including:
Processing and fulfilling orders for products and services
Managing accommodation bookings and related services
Communicating with you regarding your orders, bookings, or inquiries
Sending promotional materials and newsletters (with your consent)
Complying with legal obligations, such as tax reporting and guest registration
Improving our website, products, and services
5. Sharing Your Information
We may share your personal information with third parties in the following circumstances:
Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processing, shipping, and marketing. These providers are contractually obligated to protect your information.
Legal Compliance: We may disclose your information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of data and applicable legal requirements.
7. Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have the following rights under the GDPR:
Right to Access: You can request access to the personal information we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal information, subject to legal obligations.
Right to Restrict Processing: You can request that we limit the processing of your personal information.
Right to Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal information based on legitimate interests.
Right to Withdraw Consent: If we process your personal information based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at support@casasuli.com.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.
9. International Data Transfers
Your personal information may be transferred to and processed in countries outside the EEA. We ensure that such transfers are conducted in accordance with applicable data protection laws, including using standard contractual clauses approved by the European Commission.
10. Third-Party Links
Our website may contain links to third-party websites, including Airbnb and Booking.com. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children without parental consent. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the updated policy on our website and indicating the effective date.
13. Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@casasuli.com
By using our website and services, you acknowledge that you have read and understood this Privacy Policy.