Privacy Policy Nova Siri Village

01

Data Controller

According to EU Regulation 2016/679, GDPR, the Data Controller responsible for processing personal data collected through the Nova Siri Village website is:

The Controller processes personal data in compliance with the principles of lawfulness, fairness, transparency and confidentiality.

02

Types of Data Collected

During navigation or use of the services available on the website, the following data may be collected:

• personal and contact details such as name, surname, email and phone number;
• data submitted through quotation or contact forms;
• newsletter subscription data;
• technical browsing data;
• IP address and device-related information;
• data collected through cookies and similar technologies;
• data collected through integrated third-party services.

Data may be provided directly by the user or collected automatically while browsing the website.

03

Purposes of Processing

User Request Management

Data may be processed to respond to information requests, quotation requests, commercial inquiries and customer support requests.

Booking Management

Data may be processed to allow the use of the external booking engine and manage reservations.

Newsletter and Promotional Communications

Subject to user consent, data may be used for promotional communications, offers, newsletters and marketing campaigns via email or SMS.

Statistics and Website Improvement

Data may be processed to monitor website traffic and improve services through tools such as Google Analytics 4.

Website Security

Data may be processed to prevent unauthorized access, spam, fraudulent use and harmful activities.

04

Legal Basis for Processing

Personal data processing is based on one or more of the following legal bases:

• performance of pre-contractual measures requested by the user;
• compliance with legal obligations;
• user consent;
• legitimate interest related to website security and service improvement.

05

Cookie Policy

The website uses technical, statistical and profiling cookies, including third-party cookies.

Cookies are used to ensure proper website functionality, save preferences, analyze traffic and personalize advertising content.

Users may manage their preferences through the cookie banner or browser settings.

Non-technical cookies are installed only after obtaining the user's consent where required by applicable law.

06

Third-Party Services and Tools

The website may use services provided by third parties, including:

• Google Analytics 4;
• Google reCAPTCHA;
• Meta Pixel;
• WhatsApp;
• newsletter systems;
• external proprietary booking engine;
• Aruba hosting services.

These services may collect personal data according to their respective privacy policies.

Google Analytics 4

The website uses Google Analytics 4, a web analytics service provided by Google, to collect aggregated information about website usage and improve services.

Google Privacy Policy

Meta Pixel

The website uses Meta Pixel provided by Meta Platforms to monitor conversions and advertising activities. Processing takes place only after user consent through the cookie banner.

Meta Privacy Policy

Google reCAPTCHA

The website uses Google reCAPTCHA to protect forms and requests against automated access, spam and fraudulent activity.

WhatsApp

The website may allow users to contact the property through WhatsApp. Use of the service may involve data processing by WhatsApp according to its privacy policy.

External Booking Engine

Reservations may be managed through an external booking platform connected to the website. Data entered during the booking process is processed according to the booking provider’s privacy policy.

Aruba Hosting

The website is hosted on Aruba infrastructure. Data may be processed by the hosting provider exclusively for technical and security purposes.

07

Data Retention

Personal data is stored only for the time necessary to achieve the purposes for which it was collected.

• contact and quotation requests: maximum 24 months;
• marketing and newsletter data: until consent withdrawal;
• technical and log data: according to technical and security requirements;
• administrative and fiscal data: according to legal obligations.

08

Transfers Outside the EU

Some services used by the website may involve data transfers outside the European Union.

Such transfers are carried out in compliance with Articles 44 and following of the GDPR through appropriate safeguards including Standard Contractual Clauses, adequacy decisions and the EU-US Data Privacy Framework where applicable.

09

User Rights

Users may exercise at any time the rights provided by Articles 15 and following of the GDPR, including:

• access to personal data;
• data rectification;
• data deletion;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent.

Requests may be sent to:

Users also have the right to lodge a complaint with the Data Protection Authority.

10

Data Security

The Controller adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, unlawful use, disclosure, alteration or destruction.

Processing is carried out using IT and telematic tools with methods strictly related to the stated purposes.

11

Changes to this Privacy Policy

This Privacy Policy may be updated or modified over time.

Users are invited to periodically review this page to stay informed about any changes.

The latest version is always available at:

Last updated: May 2026