Privacy Policy and Cookie Policy
NORA'S SUITES

1. Data controller

The data controller is:
NORA'S SUITES
CIN: IT082053C2JX3QEPBM
Headquarters Via Cerda, 19 – 90139 Palermo (PA), Italy
Email: norasuites.pa@gmail.com
Telephone: +39 334 170 1660

2. Introduction
This statement describes how personal data of users visiting the website (hereinafter the “Site”) or making requests or bookings is collected and processed.
The processing of personal data is carried out in compliance with:
General Data Protection Regulation
Data Protection Act

3. Types of data collected
The Data Controller may collect and process the following categories of data:
a) Identifying and contact details
First and last name
Email address
Telephone number
Country of origin

b) Booking details
Booking details
Information about your stay
Payment details (handled by external providers - we do not store credit card details)

c) Technical and navigation data
IP address
Device and browser information
Site usage data

d) Preferences
Language
Marketing preferences
Cookie preferences

4. Purpose and legal basis for processing
a) Booking and service management
The data is processed to manage bookings, communicate with the user, and provide the requested services.
Legal basis: performance of a contract

Customer support
To respond to requests or communications.
Legal basis: legitimate interest

c) Site enhancement and analysis
To analyse site usage and improve its performance.
Legal basis: legitimate interest / consent (where required)

d) Marketing communications
The Data Controller may send promotional communications, offers, or updates relating to Nora’s Suites only with the user's explicit consent.
Consent can be withdrawn at any time.
Legal basis: consent

5. Data Communication
Personal data will not be sold or transferred to third parties for marketing purposes without user consent.
However, for the provision of services, data may be processed by third parties such as:
Payment service providers
Booking platforms (e.g. Booking.com, Airbnb)
IT and hosting service providers
These subjects process data exclusively for the purposes necessary for the provision of the service and in compliance with the GDPR.
Some entities (such as booking platforms) can act as independent controllers.
The data may also be communicated to the competent authorities in cases provided for by law.

6. Data retention
Personal data is stored for the time necessary for the purposes for which it is collected.
Booking and tax data: up to 10 years (legal obligations)
For marketing purposes: until consent is revoked or for a maximum indicative period of 24 months
Technical/analytical data: anonymised where possible

7. Rights of the data subject
The user has the right to:
Access your personal data
Request correction of inaccurate data
Request data deletion
Limit treatment
Receive data in portable format
Object to treatment
Withdraw consent at any time
To exercise your rights:
📧 norasuites.pa@gmail.com
You can also lodge a complaint with:
Data Protection Authority

8. Data security
The Controller adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss or unlawful use.

9. Cookie Policy
What are cookies
Cookies are small text files that are stored on the user's device during browsing.

Types of cookies used
a) Technical cookies (necessary)
Essential for the website's functioning and do not require consent.

Analytical cookies
Used to collect information on website usage.
They may request user consent.

c) Marketing cookies (if any)
Used for advertising or profiling purposes.
They require explicit consent.

Cookie management
Users can manage their cookie preferences via their browser or through the banner on the website.
Disabling cookies may impair some website functionality.

10. Updates
This notice may be updated from time to time. The most recent version will always be available on the Site.