Privacy & Cookie Policy
This notice describes how we process the personal data collected through the principatodiparrano.com website, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
The data controller is Principato di Parrano, with registered office at Piazza della Repubblica 5, 05010 Parrano (TR), Italy.
For any communication regarding the processing of personal data you may write to info@principatodiparrano.it.
2. Data collected
The website collects two categories of data:
- Data voluntarily provided through the contact form: first name, last name, email address, telephone number (optional), request type, number of guests, date of interest, preferred language and the content of the message.
- Navigation datacollected, subject to the user's consent, via Google Analytics 4 through cookies, for the purpose of aggregate statistical analysis of website usage.
3. Purposes of processing
Personal data are processed for the following purposes:
- responding to enquiries regarding stays, experiences and events;
- managing service communications related to the request submitted;
- fulfilling accounting and tax obligations in the event of a contractual relationship;
- analysing aggregate website usage and performance by means of Google Analytics 4, subject to the user's consent and without any advertising profiling activity.
4. Legal basis
The processing of data submitted through the contact form is based on the performance of pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR). The legitimate interest of the controller in the security, integrity and proper functioning of the website constitutes the legal basis for the processing of the strictly necessary technical data (Art. 6.1.f GDPR). The processing of statistical data through Google Analytics is based on the user's consent (Art. 6.1.a GDPR), given via the dedicated banner and withdrawable at any time. Accounting and tax obligations are fulfilled pursuant to Art. 6.1.c GDPR.
5. External processors
For the provision of certain technical services, the controller relies on third parties acting as data processors pursuant to Art. 28 GDPR:
- Formspree (Squarespace, Inc., based in the United States) processes and forwards the messages sent through the contact form.
- Google Analytics(Google Ireland Ltd., based in Ireland) provides aggregate statistics on website usage. The service is activated solely subject to the user's consent.
Data subjects are invited to consult the respective privacy notices for further detail on the processing practices adopted by these providers.
6. Transfers outside the EU
Data processed by Formspree and by Google Analytics may be transferred to the United States of America. Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission with Implementing Decision (EU) 2021/914 and, for Google, also of the EU-U.S. Data Privacy Framework, which ensure an adequate level of protection for personal data pursuant to Chapter V of the GDPR.
7. Data retention
Data collected through the contact form are retained for the time strictly necessary to handle the data subject's request. Where the request leads to a contractual relationship, the data will be retained for the duration of the relationship and subsequently for the period required by applicable legal obligations, including the ten years prescribed for tax and accounting documentation (Articles 2220 of the Italian Civil Code and 22 of Presidential Decree 600/1973).
8. Data subject rights
Pursuant to Articles 15 to 22 of the GDPR, the data subject has the right to request from the controller access to their personal data, rectification or erasure, restriction of processing, data portability, and to object to processing. To exercise these rights please write to info@principatodiparrano.it.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) should they consider that the processing of their data infringes the applicable legislation.
9. Cookies
The website uses technical cookies, necessary for the proper functioning of the pages, which do not require prior user consent pursuant to Art. 122 of the Italian Privacy Code.
It also uses third-party analytics cookiesfrom Google Analytics 4, intended to measure website usage in aggregate form. These cookies are installed only subject to the user's consent, given via the banner shown on the first visit: in the absence of consent, Google Analytics is not loaded and no analytics cookie is installed. The website does not use profiling cookies nor third-party cookies for behavioural advertising.
Users may change or withdraw their choices at any time through the «Cookie preferences» button available on the website.
10. Amendments
The controller reserves the right to update and amend this notice at any time, including in response to regulatory developments or changes to the services offered. Any amendments will be published on this page together with the date of the latest revision.