Privacy Policy

1. Data Controller

Torre Pali Vacanze - Umberto Cucinelli

Address: Via Castromediano, 191, Morciano di Leuca (LE), Italy

Email: info@torrepalivacanze.it

Privacy/GDPR phone: +39 380 458 01 35

The commercial phone number shown on the website for information and bookings is +39 388 658 70 80. For privacy and GDPR requests, please use the Data Controller contacts listed above.

2. Scope of this Notice

This notice explains how personal data is collected, used and protected when you browse torrepalivacanze.it or submit information, quote and booking requests.

3. Data Processed

The data processed may include:

• identification and contact data (name, email, phone);
• request data (apartment, check-in, check-out, guests, message, contact preference, possible price);
• technical browsing and security data (e.g. IP address, user agent, technical logs);
• analytics and advertising conversion data, only with prior cookie consent.

4. Purposes and Legal Bases

• to manage information, quote and booking requests (pre-contractual measures requested by the data subject);
• to provide customer support and operational communications (pre-contractual/contractual measures);
• to comply with legal obligations (legal obligation);
• to protect the website and infrastructure from abuse or unauthorized access (legitimate interest);
• to perform analytics and conversion tracking with third-party tools only with prior consent (consent).

5. Processing Methods and Security

Data is processed using electronic tools and appropriate technical/organizational safeguards to reduce the risk of unauthorized access, loss, unlawful use or alteration.

Communications take place through encrypted HTTPS connections.

6. Data Retention

• quote/booking request data: up to 24 months, unless longer retention is required by law or for the protection of the Data Controller rights;
• technical security data: for the time strictly necessary for security and audit purposes;
• analytics/advertising data: according to cookie settings and third-party provider retention periods.

7. Recipients and Third-Party Services

To deliver the service, the Data Controller uses third-party providers that may process personal data on its behalf:

• GitHub Pages (static hosting);
• Cloudflare (CDN, security and performance);
• Google Cloud (Cloud Run) for request backend services;
• Google Analytics / Google Ads (gtag.js) only with prior consent;
• Cookie Script for cookie consent management;
• Stripe (online payment processing) - payment data is handled directly by Stripe Inc. under its own policy: stripe.com/privacy.

8. Cookies and Tracking

The website uses technical cookies necessary for operation. Analytics/marketing cookies and third-party trackers are enabled only after explicit consent through the cookie banner.

9. Transfers Outside the EU/EEA

Some providers (e.g. Google) may involve data transfers to countries outside the EEA. Such processing is carried out under the mechanisms provided by applicable law.

10. Data Subject Rights

You have the right of access, rectification, erasure, restriction, objection and data portability, within the limits set by the GDPR.

To exercise your rights: info@torrepalivacanze.it

11. Minors

This website is not intended for children under 16. If you are under 16, do not submit personal data without parent/guardian consent.

12. Changes to this Notice

This notice may be updated over time. Any changes will be published on this page.

13. Complaint to the Supervisory Authority

If you believe your data has not been handled correctly, you may lodge a complaint with the Italian Data Protection Authority. Information and procedures are available at: www.garanteprivacy.it.