Privacy Policy
Last updated: 2 November 2026
This notice explains how we process the personal data of visitors to palazzobernardinidepace.com and of people who contact us through its forms, in accordance with Regulation (EU) 2016/679 (“GDPR”). The Italian version prevails in case of discrepancies.
1. Data controller
Palazzo Bernardini de Pace S.r.l.
Piazza San Giorgio 7, 73020 Bagnolo del Salento (LE), Italy
VAT 05381560753
Email: camilla@bernardini.it
2. Data we process
- Data you give us through the request forms: name, email, phone number, stay dates, number of guests and your message.
- Browsing data: technical data automatically logged by the systems running the site (IP address, browser, date and time, page requested), used only for security and operation.
- Statistics, only with your consent: aggregated usage data collected with Google Analytics (see the Cookie Policy).
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your requests for information and quotes | Pre-contractual steps at your request (Art. 6.1.b GDPR) | As long as needed to handle the request; at most 24 months if no contract follows |
| Managing a booked stay or event | Performance of a contract (Art. 6.1.b) and legal obligations, including tax law (Art. 6.1.c) | 10 years for tax and accounting records |
| Site security and operation | Legitimate interest (Art. 6.1.f) | A few days, unless needed to investigate abuse |
| Site usage statistics | Consent (Art. 6.1.a), which you can withdraw at any time | See the Cookie Policy |
Providing data in the forms is optional, but we cannot answer without the required fields. We do not use your data for marketing or automated decision-making.
4. Recipients
- Web3Forms: forwards form messages to the controller’s email address.
- Website hosting: Cloudflare, Inc. (Cloudflare Pages).
- Google Ireland Ltd.: Google Analytics and Google Maps, only with your consent.
- Accountants and advisors, for legal obligations.
Some providers may process data outside the EU, for example in the United States. In that case the transfer relies on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on standard contractual clauses.
5. Your rights
You may ask at any time to access, correct or delete your data, to restrict processing, to object to processing based on legitimate interest, to receive your data in a portable format and to withdraw your consent. Withdrawal does not affect processing already carried out. Write to camilla@bernardini.it. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
