Privacy
Policy.

1. Data controller

Pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR), personal data provided through this website is processed by:

TEC IMMOBILIARE S.R.L.
Via dei Caldora, 8 — 66054 Vasto (CH), Italy
VAT and Tax ID 02793290699
Email: info@palazzopartenope.it

2. Data collected

a) Data provided voluntarily through the forms

Availability request form: check-in and check-out dates, number of adults and children, email address.
Contact form: full name, email, mobile number and an optional message.

Providing this data is optional but necessary in order to reply: without it we cannot process the request.

b) Browsing data

The servers hosting this website automatically record, in their log files, the IP address, date and time of the request, pages visited and browser type. This data is used solely to ensure the correct operation and security of the website and is not used to identify users.

c) Cookies and tracking technologies

This website does not use cookies — neither technical, analytical nor profiling ones — and employs no third-party statistics or tracking tools. Fonts and icons are hosted directly on our own servers: browsing this site involves no transfer of data to external services. For this reason no consent banner is displayed.

3. Purposes of processing

Data is processed solely in order to:

• reply to availability and information requests submitted through the forms;
• manage contacts preliminary to a possible booking;
• comply with legal, accounting and tax obligations, should the request result in an actual stay;
• ensure the security of the website and prevent automated submissions and abuse.

Data is not used for marketing purposes and no promotional communications are sent.

4. Legal basis

• Art. 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract: this is the basis for data submitted through the forms.
• Art. 6(1)(c) GDPR — compliance with legal obligations, for data relating to stays actually completed.
• Art. 6(1)(f) GDPR — legitimate interest in the security of the website, for system logs.

5. Method of processing

Processing is carried out by electronic means, in accordance with the principles of lawfulness, fairness, transparency and data minimisation. Requests submitted through the forms are transmitted over an encrypted connection and delivered to the Controller’s mailbox. They are not stored in any database on the website.

6. Recipients of the data

Data is neither disclosed publicly nor sold to third parties. It may be processed by:

• providers of technical services for the development, management and maintenance of the website, hosting and email, appointed as data processors pursuant to art. 28 GDPR;
• accounting and legal advisors, strictly for legal obligations;
• the competent authorities, in the cases provided for by law.

Data is stored on servers located in Italy. No transfer outside the European Economic Area takes place.

7. Retention period

• Information and availability requests with no follow-up: maximum 12 months from the last contact.
• Data relating to stays actually completed: 10 years, for tax and accounting obligations.
• System logs: according to the hosting provider’s technical retention times, as a rule no longer than 12 months.

8. Rights of the data subject

At any time you may exercise the rights set out in articles 15-22 GDPR: access, rectification, erasure, restriction, objection to processing and data portability.

To exercise them, write to info@palazzopartenope.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Automated decision-making

No automated decision-making or profiling is carried out.

10. Changes

This privacy notice may be updated. Any changes will be published on this page together with the date of the latest update.