PRIVACY POLICY
pursuant to Articles 13–14 GDPR (EU Regulation 2016/679)
Website: https://palazzodellanave.com
Last updated: March 2026
1. Data Controller
MY HOST S.R.L.
Registered office: Via Maurizio Bufalini 3, 50122 Florence (FI), Italy
VAT No. / Tax Code: IT07451170489 — REA: FI-703972
Certified email (PEC): myhost@pec.net
Email: hello@palazzodellanave.com
2. Categories of data processed and purposes
2.1 Website browsing (technical data)
When you browse the website, technical data (IP address, browser, operating system, pages visited, access times) are automatically collected as necessary for the proper functioning of the site. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
2.2 Contact form
By completing the contact form, your name, email address and message are collected in order to respond to your enquiry. Legal basis: pre-contractual measures / consent (Art. 6(1)(b)/(a) GDPR).
2.3 Google Analytics 4 (GA4)
This website uses Google Analytics 4 to collect anonymous statistical data about site usage (pages visited, session duration, geographic origin). Data are pseudonymised and transferred to Google LLC (USA), subject to Standard Contractual Clauses adopted by the European Commission.
Legal basis: user consent (Art. 6(1)(a) GDPR), expressed via the cookie banner.
You may opt out of GA4 by installing the browser add-on: https://tools.google.com/dlpage/gaoptout
2.4 Google reCAPTCHA
The contact form is protected by Google reCAPTCHA (Google LLC) to prevent spam and abuse. The service collects hardware/software data (e.g. IP address, browser data) and transmits them to Google. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Google Privacy Policy: https://policies.google.com/privacy
2.5 Cookies and similar technologies
The website uses technical cookies (necessary for operation) and third-party analytical/profiling cookies (GA4), activated only upon consent. For further details please refer to our Cookie Policy, available in the dedicated section of the website.
3. Multilingual management (Polylang)
The website is available in Italian and English via the Polylang plugin. No additional personal data are collected in relation to the selected language.
4. Recipients and data transfers
Personal data may be shared with:
- Google LLC (Google Analytics 4, reCAPTCHA) — USA, with adequate safeguards (SCC)
- Technical hosting provider — EU/EEA
- Any collaborators of the Controller, to the strictly necessary extent
Data are not sold or transferred to third parties for their own commercial purposes.
5. Retention period
- Contact form data: retained for the time necessary to handle the request, and in any case no longer than 24 months
- Browsing data / technical logs: maximum 12 months
- GA4 data: 14 months (Google Analytics default setting)
6. Data subject rights
Pursuant to Articles 15–22 GDPR, you have the right to:
- Access your personal data
- Obtain rectification or erasure
- Request restriction of processing
- Object to processing
- Request data portability
- Withdraw consent at any time, without affecting the lawfulness of prior processing
To exercise your rights, please write to: hello@palazzodellanave.com
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it.
7. Changes to this policy
The Controller reserves the right to update this policy. Material changes will be communicated via a notice on the website. We recommend checking this page periodically.
