Privacy Policy

1. Data Controller

The data controller responsible for the processing described in this Privacy Policy is:

2. Personal Data We Collect

Depending on how you use the website and our services, we may collect the following categories of personal data.

Information you provide directly

• Name, surname, email address, telephone number and country of residence.
• Information included in contact messages, booking enquiries, requests or other communications.
• Information submitted through workshop or experience registration forms.
• Booking information, including dates of stay, number of guests, accommodation preferences and special requests.
• Information relating to dietary requirements, allergies, accessibility needs or other requests that you voluntarily provide.
• Employment and recruitment information submitted through our career form, including a CV, professional experience, education and other application materials.

Please do not provide sensitive or special-category personal data unless it is necessary for your request. Where such information is necessary, we process it only with an appropriate legal basis and with additional safeguards.

Information collected automatically

• IP address and approximate location.
• Browser, device and operating-system information.
• Pages visited, date and time of access and referring website.
• Website interaction, performance and diagnostic information.
• Cookie choices and consent records.
• Security logs and information required to detect misuse, malicious activity or technical problems.

3. How We Collect Personal Data

We may collect personal data when you:

• visit or interact with our website;
• contact us by email, telephone or through a website form;
• request information about rooms, experiences or services;
• register for a workshop or experience;
• use the online booking platform accessed through our website;
• submit an employment application;
• select or update your cookie preferences;
• interact with embedded or linked services provided by third parties.

4. Purposes and Legal Bases

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

5. Website Forms and Communications

Contact and workshop forms

When you submit a contact, workshop or experience form, the information entered in the form is used to process and respond to your request. Form submissions may be stored within our website administration system and may also be delivered to authorised recipients by email.

Our email systems may temporarily retain delivery records for security, troubleshooting and confirmation that a message was sent successfully.

Career applications

Information submitted through our career form is used to evaluate your application, communicate with you and manage the recruitment process.

Application data is accessible only to authorised personnel and service providers involved in recruitment. Please include only information relevant to your application.

6. Online Bookings

The “Reserve Now” links on this website direct visitors to the Simple Booking reservation platform operated by QNT S.r.l.

When you use that platform, booking information may be processed by Locanda Le Piazze and by QNT S.r.l. for purposes including checking availability, managing reservations, processing payments where applicable, communicating with guests and providing booked services.

The booking platform may apply its own privacy and cookie information. We recommend reviewing the Simple Booking Privacy Policy before submitting a reservation.

7. Cookies and Consent Management

We use CookieYes to display our cookie banner, record consent preferences and prevent non-essential technologies from being activated before the relevant consent has been provided.

Necessary technologies may operate without consent where they are required for the website to function, maintain security or remember the visitor’s privacy choices.

You can review or change your choices at any time through the cookie preferences control available on the website.

Manage cookie preferences Read our Cookie Policy

8. Analytics and Google Services

Subject to your consent, the website may use Google services, including Google Analytics, Google Tag Manager and Google Ads, to understand website usage, measure performance and evaluate advertising activity.

Information processed by these services may include device and browser information, IP address, website interactions, referral information and identifiers stored through cookies or similar technologies.

Google Consent Mode may send limited consent-status or cookieless signals when consent has not been granted. These signals are used to communicate the visitor’s privacy choices to Google services.

Further information is available in the Google Privacy Policy .

9. Meta Pixel

Subject to your advertising-cookie consent, the website may use the Meta Pixel to measure visits, understand the effectiveness of advertising campaigns and build audiences for advertising on Meta platforms.

The Meta Pixel is not intended to activate before the required consent has been provided.

Further information is available in the Meta Privacy Policy .

10. Tripadvisor and Social Media

Our website may display Tripadvisor content or links and may provide links to social-media profiles and other external platforms.

A static image or link may be displayed without enabling third-party tracking. Interactive third-party content or scripts are activated only where the appropriate consent has been provided.

When you follow an external link or interact with content supplied by another platform, that platform processes information under its own privacy terms.

11. Service Providers and Recipients

Personal data may be accessed or processed, where necessary, by:

• authorised employees and collaborators of Locanda Le Piazze;
• website hosting, technical maintenance and security providers;
• booking and hotel-management technology providers;
• email-delivery and communication providers;
• analytics, advertising and consent-management providers;
• professional advisers, accountants, insurers and legal advisers;
• public authorities where disclosure is required by law or a legally binding request.

Service providers acting on our behalf may process personal data only according to our instructions, contractual obligations and applicable data-protection law.

12. International Data Transfers

Some technology providers may process data in countries outside the European Economic Area.

Where required, international transfers are protected through an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism recognised under applicable data-protection law.

Information about the transfer arrangements used by an individual provider is available in that provider’s privacy documentation.

13. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected and to satisfy legal, accounting, security or dispute-resolution requirements.

Data may be retained for a longer period where necessary to comply with law, respond to a lawful request or establish, exercise or defend a legal claim.

14. Data Security

We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, disclosure, unauthorised access or misuse.

Access to personal data is limited to persons and service providers who require it for an authorised purpose. However, no method of transmission or storage can be guaranteed to be completely secure.

15. Your Data-Protection Rights

Subject to the conditions established by applicable law, you may have the right to:

• request confirmation that we process your personal data;
• request access to and a copy of your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time;
• receive certain information in a structured, commonly used and machine-readable format;
• request transmission of eligible data to another controller;
• lodge a complaint with a competent supervisory authority.

To exercise your rights, contact: [email protected] .

We may request information necessary to confirm your identity before responding. We will respond within the period required by applicable law.

You also have the right to lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali .

16. Automated Decision-Making

We do not use personal data collected directly through this website to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.

17. Children’s Data

This website is not directed to children. Information concerning minors that is necessary for a stay or requested service should be provided only by a parent, guardian or other authorised adult.

18. External Websites

Our website may contain links to external websites and services. We are not responsible for the privacy practices or content of those external services. We recommend reviewing their privacy information before providing personal data.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our services, website technologies or legal obligations change.

The most recent version will be published on this page with an updated revision date.