Privacy notice
Last updated: 9 August 2026
Who we are
Il Palazzino is the data controller for personal information submitted through this website. We operate from Il Palazzino, Marcignano, 06010 Monte Santa Maria Tiberina (PG), Italy. For privacy questions, contact us through the enquiry form and write “privacy” in the message.
Information we collect
When you send an enquiry or email us, we receive the details you provide, including your name, email address, requested dates, group size, message and related correspondence. We may also record the page used, referral source and campaign information so we can understand how the enquiry reached us. The website may receive routine technical information such as an IP address and browser details for security and service operation. The private pool record stores operational readings, maintenance actions, notes, timestamps and whether input or admin access made a change; it has no named user accounts. After access, the browser may keep the last received operational snapshot and place unsent new readings in a local outbox so a weak connection does not silently lose them.
How we use your information
We use your information to answer an enquiry, check availability, prepare a quotation, administer a booking, keep appropriate financial records and protect the website from misuse. The legal basis is usually taking steps at your request before a booking, performing the booking contract, meeting legal obligations, or our legitimate interests in operating and securing the service. Optional analytics relies on your consent.
Analytics and anti-spam services
Google Analytics loads only after you allow analytics. It may measure pages viewed, device category, approximate location and actions such as viewing the gallery or sending an enquiry. Names, email addresses and free-text messages are not sent to Google Analytics. Cloudflare Turnstile may process technical signals needed to distinguish genuine visitors from automated spam on the enquiry and pool-access screens. Short-lived security records help limit repeated failed attempts.
Service providers and international processing
The website is hosted by Cloudflare, which also provides secure data storage and transactional email delivery. Google provides optional analytics. These providers process information only as needed to supply their services, and may handle information outside the United Kingdom or European Economic Area using recognised contractual or legal safeguards.
How long we keep information
Unsuccessful enquiries are normally kept for up to 24 months so we can answer follow-up questions and understand previous correspondence. Booking and payment records may be kept longer where accounting, tax or legal rules require it. Pool technical and water records are retained for the period required by the applicable control plan, with two years as the working minimum under the provisional A/2 basis. A remembered pool device is recognised for no more than 30 days. We remove information when it is no longer needed.
Your rights
Depending on the circumstances, you may ask us for access to your personal information, correction, deletion, restriction, portability or an objection to certain uses. You may withdraw analytics consent at any time through the cookie choices page. We may need to confirm your identity before acting on a request.
Complaints
Please contact us first so we can address the concern. You also have the right to complain to the supervisory authority where you live or work, including the Information Commissioner’s Office in the United Kingdom or the Garante per la protezione dei dati personali in Italy.