Privacy Policy

Last updated: 10 September 2026

Who is responsible for your data

The data controller for palladianvilla.com is Roberta Zamberlan, operating as a private individual. Contact address for the property: Piazza Paolo Camerini, Piazzola sul Brenta, Veneto, Italy.

Email: roberta.zamberlan@tiscali.it
Telephone: +39 327 308 2974

Information we collect and why

Enquiries and availability requests. We receive your name, email address, message and, for availability requests, your preferred check-in and check-out dates and number of guests. We use these details to answer you, check availability and prepare a proposal. Processing necessary to take steps at your request before a booking is based on Article 6(1)(b) GDPR. Other correspondence is handled on the basis of our legitimate interest in responding to enquiries, under Article 6(1)(f).

Website operation and security. The hosting and security systems may process IP addresses, request times, browser information and technical logs to deliver the website, prevent abuse and investigate faults. The basis is our legitimate interest in operating and protecting the service, Article 6(1)(f).

Cookie preferences and optional services. Complianz records your privacy choices. Optional tracking or external content requiring consent is handled on the basis of your consent, Article 6(1)(a). See the Cookie Policy for categories and controls.

The website forms request information, rather than automatically confirming a reservation or collecting payment. There is no newsletter subscription in these forms. Please do not include identity documents, payment-card details or sensitive personal information in an initial enquiry.

Which details are required

Fields marked with an asterisk are needed to handle the relevant request. The message in the availability form is optional. You may choose not to provide information, but we may then be unable to answer you or prepare a suitable proposal. Acknowledging this notice does not subscribe you to marketing.

How information is handled and who receives it

Enquiries submitted through MetForm are sent to the controller’s Tiscali email address and are also stored in the WordPress administration area. They can be accessed by the host and by authorised technical personnel where necessary for operating or maintaining the website.

Service providers involved in operating the site include SiteGround for hosting and related technical services, and the email provider used for correspondence. They process information according to their applicable roles and arrangements. Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims. We do not sell enquiry data.

WhatsApp, reviews and external links

If you choose WhatsApp, you leave the website and communicate through WhatsApp/Meta. Your number, profile information and message are then processed under that service’s privacy terms. You may contact us by email or through the website form instead.

The reviews section uses Trustindex to display reviews from Booking.com. Loading an external review service can disclose technical information such as your IP address and browser details to that provider. Consent controls apply where required. Public reviewer information is supplied by the review provider.

Links to maps, Booking.com, transport operators and other websites open external services. Those services apply their own privacy notices. External services may process data outside the European Economic Area. The applicable provider’s notice describes destinations and safeguards; where we engage a processor for a restricted transfer, an appropriate GDPR transfer mechanism is required.

Retention

Enquiry information is kept for the period needed to handle the request and any follow-up. The appropriate period depends on whether the enquiry is still open, results in a stay, or must be retained to meet a legal obligation or deal with a specific dispute. Records relating to a confirmed stay may be subject to separate accounting, guest-registration or legal requirements.

Technical logs and backups follow the hosting and security providers’ retention arrangements and are used for the corresponding operational purposes. Cookie lifetimes are described in the Cookie Policy. Contact the controller to ask about the retention or deletion of your particular enquiry.

Your rights

Subject to the conditions in the GDPR, you may request access to your data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you can withdraw consent at any time without affecting the lawfulness of earlier processing.

Send requests to roberta.zamberlan@tiscali.it. We may need information to verify your identity before responding. You may also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or the competent authority where you live or work.

Automated decisions and updates

Availability requests are reviewed by the host. They are not decided by an automated booking or profiling system. This notice may be updated when website services or processing activities change. The date above identifies the latest version.