Last updated: 13/07/2026
This notice describes how the personal data of users who visit the website www.lagunadinora.it (the “Site”) and purchase tickets, excursions and activities is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (Privacy Code).
1. Data Controller
Ittica Nora Soc. Coop — Registered office: Laguna di Nora, località Nora, Pula (SU) – Sardinia — VAT no. / Tax code: IT 01522880929 — Email: booking@lagunadinora.it — Tel. +39 351 5971424
2. Data we process
Data provided by the user. When you make a purchase or use the contact and booking forms, we collect: first and last name, email address, telephone number, number of participants (adults and children) and billing details. Any information about disabilities or medical conditions, provided voluntarily for safety purposes, constitutes a special category of personal data (Art. 9 GDPR) and is processed only with the data subject’s explicit consent.
Payment data. Payments are processed by Stripe Payments Europe Ltd. The Controller never has access to the customer’s full payment card details. Stripe privacy policy: https://stripe.com/it/privacy
Browsing data and cookies. The Site uses technical cookies and, subject to consent, analytics and third-party cookies, managed via the consent banner. For details, please see the Site’s Cookie Policy.
3. Purposes and legal bases
Data is processed for: (a) managing orders, bookings and the provision of purchased services — legal basis: performance of a contract (Art. 6.1.b GDPR); (b) communications regarding the booking, including changes, rescheduling and refunds — performance of a contract; (c) tax and accounting obligations — legal obligation (Art. 6.1.c); (d) participant safety during activities — explicit consent for health-related data (Art. 9.2.a); (e) aggregate statistical analysis of Site usage — consent (Art. 6.1.a).
4. Processing methods and retention
Data is processed using electronic tools and appropriate security measures. It is retained for as long as necessary to provide the service and, for tax-related data, for the period required by law (10 years). Health-related information is kept only for the time needed to carry out the booked activity.
5. Recipients
Data may be shared with: payment service providers (Stripe), IT and hosting providers, tax advisors and, for combined tickets, the ticket office of the Nora Archaeological Area, limited to the data needed to manage the visit. Data is never disclosed to the public or sold to third parties.
6. Transfers outside the EU
Some providers (e.g. Stripe, Google) may transfer data to third countries. Such transfers take place on the basis of adequacy decisions or standard contractual clauses approved by the European Commission.
7. Your rights
You may exercise at any time the rights set out in Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) by writing to booking@lagunadinora.it. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Minors
The Site’s forms are not intended for children under 18: data concerning minors taking part in the activities is provided by the parent or accompanying adult responsible for them.
9. Changes
The Controller reserves the right to amend this notice; any changes will be published on this page with the date of update.