Privacy & Cookie Policy

1. Data controller

The data controller is Principato di Parrano, with registered office at Piazza della Repubblica 5, 05010 Parrano (TR), Italy.

For any communication regarding the processing of personal data you may write to info@principatodiparrano.com.

2. Data collected

The website collects two categories of data:

• Data voluntarily provided through the contact form: first name, last name, email address, telephone number (optional), request type, number of guests, date of interest, preferred language and the content of the message.
• Navigation datacollected, subject to the user's consent, via Google Analytics 4 and Microsoft Clarity through cookies, for the purpose of aggregate statistical analysis of website usage. Clarity records page interactions pseudonymously (clicks, scrolling, cursor movements) to produce heatmaps and session replays; text typed into form fields is masked and not collected.
• Anonymous visit statistics collected via Vercel Web Analytics without cookies or persistent identifiers (page visited, referring site, device and browser type, country), which do not allow the user to be identified.

3. Purposes of processing

Personal data are processed for the following purposes:

• responding to enquiries regarding stays, experiences and events;
• managing service communications related to the request submitted;
• fulfilling accounting and tax obligations in the event of a contractual relationship;
• analysing aggregate website usage and performance by means of Google Analytics 4 and Microsoft Clarity, subject to the user's consent and without any advertising profiling activity;
• counting website visits anonymously and in aggregate by means of Vercel Web Analytics, without cookies.

4. Legal basis

The processing of data submitted through the contact form is based on the performance of pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR). The legitimate interest of the controller in the security, integrity and proper functioning of the website constitutes the legal basis for the processing of the strictly necessary technical data and of the anonymous visit statistics collected without cookies (Art. 6.1.f GDPR). The processing of statistical data through Google Analytics and Microsoft Clarity is based on the user's consent (Art. 6.1.a GDPR), given via the dedicated banner and withdrawable at any time. Accounting and tax obligations are fulfilled pursuant to Art. 6.1.c GDPR.

5. External processors

For the provision of certain technical services, the controller relies on third parties acting as data processors pursuant to Art. 28 GDPR:

• Formspree (Squarespace, Inc., based in the United States) processes and forwards the messages sent through the contact form.
• Google Analytics(Google Ireland Ltd., based in Ireland) provides aggregate statistics on website usage. The service is activated solely subject to the user's consent.
• Microsoft Clarity(Microsoft Corporation, based in the United States) provides heatmaps and anonymised session replays. The service is activated solely subject to the user's consent.
• Vercel (Vercel Inc., based in the United States) hosts the website and provides aggregate visit statistics without cookies (Vercel Web Analytics).

Data subjects are invited to consult the respective privacy notices for further detail on the processing practices adopted by these providers.

6. Transfers outside the EU

Data processed by Formspree, Google Analytics, Microsoft Clarity and Vercel may be transferred to the United States of America. Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission with Implementing Decision (EU) 2021/914 and, for Google, Microsoft and Vercel, also of the EU-U.S. Data Privacy Framework, which ensure an adequate level of protection for personal data pursuant to Chapter V of the GDPR.

7. Data retention

Data collected through the contact form are retained for the time strictly necessary to handle the data subject's request. Where the request leads to a contractual relationship, the data will be retained for the duration of the relationship and subsequently for the period required by applicable legal obligations, including the ten years prescribed for tax and accounting documentation (Articles 2220 of the Italian Civil Code and 22 of Presidential Decree 600/1973).

8. Data subject rights

Pursuant to Articles 15 to 22 of the GDPR, the data subject has the right to request from the controller access to their personal data, rectification or erasure, restriction of processing, data portability, and to object to processing. To exercise these rights please write to info@principatodiparrano.com.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) should they consider that the processing of their data infringes the applicable legislation.

9. Cookies

The website uses technical cookies, necessary for the proper functioning of the pages, which do not require prior user consent pursuant to Art. 122 of the Italian Privacy Code.

It also uses third-party analytics cookiesfrom Google Analytics 4 and Microsoft Clarity, intended to measure website usage in aggregate form. These cookies are installed only subject to the user's consent, given via the banner shown on the first visit: in the absence of consent, neither Google Analytics nor Clarity is loaded and no analytics cookie is installed. The website does not use profiling cookies nor third-party cookies for behavioural advertising.

Visit statistics from Vercel Web Analytics use no cookies and store no information on the user's device, and therefore do not require consent.

Users may change or withdraw their choices at any time through the «Cookie preferences» button available on the website.

10. Amendments

The controller reserves the right to update and amend this notice at any time, including in response to regulatory developments or changes to the services offered. Any amendments will be published on this page together with the date of the latest revision.

Date of latest revision: 7 July 2026