Privacy Policy

This Privacy Policy clearly and comprehensively describes the policies adopted by the Data Controller. This page explains how the website is managed with regard to the processing of personal data of users who browse it. Data processing is always based on principles of lawfulness and fairness, in compliance with all applicable regulations, and appropriate security measures are adopted to protect data.

This Privacy Policy is provided as a short notice pursuant to Article 13 of Regulation (EU) 679/2016 (GDPR), as well as pursuant to the Cookie Provision No. 229 of 8 May 2014. It is intended to inform website visitors about the use of the data provided and the cookies used by the website. This notice is also provided pursuant to Recommendation No. 2/2001 adopted by the Working Party established under Article 29 of Directive 95/46/EC, to those who interact with the web services of this site, accessible electronically at: susafa.com.

By using any of our services and/or accepting this Privacy Policy, for example as part of registering for one of our services, you consent to the collection and use of personal information as described herein. Please note that this Privacy Policy does not apply to the processing of personal information by third parties, such as airlines, car rental companies and other service providers, companies that organize or offer travel packages, commercial partners or corporate customers.

1) Personal information we collect

The personal information we collect includes:

Your first and last name, email address, telephone number and place of residence;
Credit card details (card type and number, cardholder name, expiration date and CVC code);
Information about your stays, including arrival and departure dates, special requests and your service preferences (room preferences, services or other);
Information you provide regarding your marketing preferences or promotional offers.

Collection at the property

We collect additional personal information during registration/check-in at our hotel, including information required by local laws (for the purpose of complying with legal obligations).

Event organization at our property

If you plan to organize an event with us, we will record the event or meeting details, date, number of guests, guest room details and, for corporate events, information about your organization (name, annual budget, number of sponsored events per year). We also collect information about guests who are part of your group or event. If you visit us as part of a group, we may receive your personal information from the group and, with your express consent, send you commercial information following your stay or event participation. If you attend an event, we may share your personal information with the event organizers. If you are an event organizer, we may also share information about your event with third-party service providers who may send you commercial information about event-related services.

Information we collect from third parties

We may also collect information about you from third parties, including our partners (travel agencies, airlines, payment card providers) and other partners, as well as from social media services in accordance with your settings on those services.

Information collected automatically

When you use our website, we automatically collect information, some of which may be personal data, such as language settings, IP address, location, device settings, operating system, login information, usage time, requested URL, status reports, user agents (such as browser version information), browsing history and types of content viewed. We may also collect data automatically through cookies. Such data may also be used to ascertain liability in the event of potential cybercrimes against the website.

2) Purposes of processing, legal basis and lawfulness

Personal data are processed for the following purposes:

a) management of customer relationships (reservation management, invoicing, quotations), and performance of contractual obligations;
b) compliance with legal obligations, particularly accounting and tax obligations;
c) management of disputes.

Collection at the property

Additional personal data are collected during registration/check-in, including information required by local laws, for compliance with legal obligations.

2a) Service-related purposes

Sending promotional offers related to our services and updates on rates and offers, as well as greetings via post, fax or email (with your prior written consent);
Providing hotel services, such as external communication of data relating to your stay solely to allow the receipt of items, messages and telephone calls addressed to you (with your prior written consent).

For the purposes referred to in point 2(a), processing is based on the performance of a contract. For the purposes referred to in points 2(b) and 2(c), processing is based on legitimate interests, such as administrative, legal or fraud prevention purposes, while balancing your rights and interests. Where applicable, processing is also based on compliance with legal obligations. For the purposes referred to in point 2a), your consent will be requested and may be withdrawn at any time by contacting us at the addresses provided at the end of this notice.

3) Identity and contact details

This website is managed by the Data Controller: Società Agricola Susafa S.R.L., Via Generale Giuseppe Arimondi, 2 – 90143 Palermo, Italy.
Email: info@susafa.com – Skype: info_656351

The Data Controller guarantees the security, confidentiality and protection of the data throughout all stages of processing, in compliance with GDPR 679/2016.

4) Place of processing

Processing related to the web services of this site takes place at the Data Controller’s premises and is carried out only by authorized personnel and by the Internet and hosting service provider, under the strict control of the Data Controller.

5) Nature of data provision

For the purposes set out in point 2), data provision is mandatory in the case of hotel reservations; failure to provide such data may result in the inability to provide the requested service. For the purposes set out in point 2a), data provision is optional and does not affect service provision.

6) Refusal to provide data

Users may refuse to provide navigation data by disabling cookies through their browser settings. Disabling cookies may affect the functionality of the website.

7) Data recipients

Personal data will not be disclosed, sold or exchanged with third parties without the explicit consent of the data subject, except as required for contractual obligations or legal compliance.

Data may be communicated to third parties acting as external data processors, including:

IT service providers;
Professional firms or consulting companies;
Public administrations, authorities or entities, as required by law;
Group companies or business network partners directly involved in service provision.

Only data strictly necessary for the relevant purposes will be shared.

8) Optional provision of data

Except for navigation data, users are free to provide personal data through web forms or to request newsletters, information materials or commercial communications. Failure to provide such data may prevent fulfillment of the request.

9) Data sharing

Booking.com

We collaborate with Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, The Netherlands, to offer online booking services. Booking management is handled by Booking.com. Data entered on this website will be shared with Booking.com and its affiliates and may include your name, contact details, payment details, guest names and preferences. Booking.com may use your data for technical, analytical and marketing purposes as described in its Privacy Policy. If data are transferred outside the EEA, Booking.com will ensure appropriate safeguards.

Other service providers and competent authorities may also receive data as required for service provision or legal compliance.

10) Security

Società Agricola Susafa S.R.L. has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, misuse or disclosure. Only authorized personnel may access personal data.

11) Data retention

Personal data will be retained for as long as necessary to provide services, comply with legal obligations, manage disputes and prevent fraud, in accordance with applicable laws.

12) Data transfer

The Data Controller does not transfer personal data to third countries or international organizations.

13) Withdrawal of consent

You may withdraw your consent at any time pursuant to GDPR 679/2016.

14) Data subject rights

You have the right to access, rectify, erase, restrict or object to processing, request data portability, and withdraw consent at any time, in accordance with Articles 15–21 of GDPR 679/2016. Requests may be sent to: info@susafa.com.

15) Lodging a complaint

You have the right to lodge a complaint with the supervisory authority of your country of residence.

16) Information not contained in this policy

Further information regarding the processing of personal data may be requested from the Data Controller at any time.

17) Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Users are encouraged to review it regularly.

18) Information about this Privacy Policy

The Data Controller is responsible for this Privacy Policy.

19) Children’s privacy and external links

This website is not directed at children. If personal data of minors are collected without parental consent, such data will be deleted. External websites linked from this site are not governed by this Privacy Policy.

20) Legal defense

Personal data may be used by the Data Controller for legal defense purposes or to comply with lawful requests from public authorities.

21) Legal references

This Privacy Policy is drafted in compliance with Legislative Decree 196/2003, GDPR 679/2016, Directive 95/46/EC and Directive 2009/136/EC regarding cookies.

Payment Policies

Cancellation Policy