Privacy Policy – Palazzo De Giorgi

(Updated January 26, 2026)

1. Data controller

The Data Controller is Palazzo De Giorgi, with registered office in:

Viale O. Quarta, 7 – 73100 Lecce (LE), Italy
📧 E-mail: info@palazzodegiorgi.it
📞 Phone: +39 320 762 3438

Palazzo De Giorgi
CIS: LE07503561000008083
CIN: IT075035C100021526
CF: NSTDNL77A21D862Q

The Data Controller is responsible for the management, protection, and processing of personal data collected through this website.

2. Type of data collected

The following categories of personal data may be collected through the website:

a) Data provided voluntarily by the user

• Name and surname
• E-mail address
• Telephone number
• Any other data entered in messages or requests for information and bookings

This data is provided directly by the user via:

• contact form
• information or booking requests
• communications by email or telephone

b) Technical navigation data

Automatically collected through technical and analytical cookies:

• IP address
• type of browser used
• pages visited
• date, time and duration of the visit
• information about the device used

No special data will be collected (Article 9 of the GDPR), unless the user provides explicit and specific consent.

3. Purpose and legal basis of the processing

Personal data are processed for the following purposes:

a) Respond to user requests

Management of requests for information, availability, quotes, and reservations.
Legal basis: Art. 6.1.b GDPR – implementation of pre-contractual measures.

b) Legal and administrative obligations

Tax, accounting, and reporting obligations required by current legislation.
Legal basis: Art. 6.1.c GDPR – legal obligation.

c) Optional sending of informative or promotional communications

Offers, updates, and commercial communications (only with prior consent).
Legal basis: Art. 6.1.a GDPR – consent of the data subject.

d) Statistical analysis and site improvement

Aggregate and anonymous website usage analytics.
Legal basis: Art. 6.1.f GDPR – legitimate interest of the Data Controller.

4. Data processing and storage methods

Processing is carried out using electronic and, where necessary, paper-based tools.
The Data Controller adopts appropriate technical and organizational measures to ensure:

• safety
• confidentiality
• data integrity
• protection from unauthorized access

Storage times

• Data sent via contact form: up to 24 months from the last communication
• Browsing data: as indicated in the Cookie Policy
• Data relating to reservations and administrative obligations: in accordance with the terms established by Italian tax legislation

5. Communication and dissemination of data

Personal data will not be disclosed.
It may be disclosed exclusively to external parties operating on behalf of the Data Controller, such as:

• web service providers, hosting and technical maintenance
• administrative, tax or legal consultants
• public authorities, in the cases provided by law

These entities operate as:

• External data controllers
• or persons authorized by the Owner

6. Transfer of data outside the European Union

As a rule, data is not transferred outside the EU.
If this is necessary for the use of third-party services, the transfer will take place in compliance with Articles 44 et seq. of the GDPR, via:

• adequacy decisions
• standard contractual clauses
• other guarantees provided by the legislation

7. Rights of the interested party

The user may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including:

• access to personal data
• correction or update
• erasure (“right to be forgotten”)
• limitation of processing
• opposition to treatment
• data portability
• withdrawal of consent (without affecting any processing already carried out)

How to exercise your rights

You can contact the Holder by writing to:
📧 info@palazzodegiorgi.it

8. Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you can lodge a complaint with:

Data Protection Authority
Website: www.garanteprivacy.it

9. Changes to this Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time.
Changes will be posted on this page, indicating the date of their update.