PRIVACY AND COOKIE POLICY
Casa Clorinda

1. Data controller

The data controller is:
Casa Clorinda
HeadquartersVia Gramsci 14 A, Fiumicello Villa Vicentina UDINE / Via Giovanni Gardenal 2/C Aquileia
Email casaclorindafiumicello@gmail.com – casaaquileiaitalia@gmail.com


Telephone +39 3334974575

2. Introduction
This notice describes how personal data of users visiting the website (hereinafter the "Site") or making enquiries or bookings is collected and processed.
The processing of personal data is carried out in compliance with:
General Data Protection Regulation
Data Protection Act

3. Types of data collected
The Controller may collect and process the following categories of data:
a) Identifying and contact details
Full name
Email address
Phone number
Country of origin

b) Booking details
Booking details
Information about your stay
Payment data (handled by external providers — we do not store credit card details)

c) Technical and navigational data
IP address
Device and browser information
Site usage data

d) Preferences
Language
Marketing preferences
Cookie preferences

4. Purpose and legal basis for processing
a) Booking and service management
The data is processed to manage bookings, communicate with the user, and provide the requested services.
Legal basis: performance of a contract

Customer Support
To respond to requests or communications.
Legal basis: legitimate interest

c) Site improvement and analysis
To analyse site usage and improve its performance.
Legal basis: legitimate interest / consent (where required)

d) Marketing communications
The Data Controller may send promotional communications, offers, or updates relating to Nora’s Suites only with the explicit consent of the user.
Consent can be withdrawn at any time.
Legal basis: consent

5. Communication of data
Personal data will not be sold or transferred to third parties for marketing purposes without user consent.
However, for service provision, data may be processed by third parties such as:
Payment service providers
Booking platforms (e.g. Booking.com, Airbnb)
IT service and hosting providers
These subjects process data exclusively for purposes necessary for the provision of the service and in compliance with GDPR.
Some entities (like booking platforms) can act as autonomous data controllers.
The data may also be communicated to the competent authorities in cases provided for by law.

6. Data retention
Personal data is kept for the time necessary for the purposes for which it is collected:
Booking and tax data: up to 10 years (legal obligations)
For marketing purposes: until consent is withdrawn or for a maximum indicative period of 24 months
Technical/analytical data: anonymised where possible

7. Data Subject Rights
The user is entitled to:
Access your personal data
Request correction of inaccurate data
Request data deletion
Limit treatment
Receive data in portable format
Object to processing
Withdraw consent at any time
To exercise your rights:
casaclorindafiumicello@gmail.com
You can also lodge a complaint with:
Information Commissioner's Office

8. Data Security
The Controller adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss or unlawful use.

9. Cookie Policy
What are cookies
Cookies are small text files that are stored on a user's device when browsing.

Types of cookies used
Technical cookies (necessary)
Essential for the website's operation and do not require consent.

b) Analytical cookies
Used to gather information about site usage.
They can request user consent.

c) Marketing cookies (if any)
Used for advertising or profiling purposes.
They require explicit consent.

Cookie management
Users can manage cookie preferences through their browser or via the banner on the website.
Disabling cookies may impair some website functionality.

10. Updates
This information may be updated from time to time. The most recent version will always be available on the Website.