Privacy

A short note on data.

Plain English. No dark patterns. Last updated 14 May 2026.

Home → Privacy

Who we are

Palazzo Palloni is a two-unit short-term rental in Sorano (Grosseto), Tuscany, run by Matteo Rossi.

Contact for any privacy matter: info@palazzopalloni.com · Via Ferdinando Palloni 2, 58010 Sorano (GR), Italia.

CIN IT053026C2KWMAA9ZK · CIR 053026LTN0056

What we collect, and why

When you visit the site

If you accept cookies, we use Google Analytics 4 to count visits and understand which pages and stories resonate. We do not run ads and we do not share data with advertisers. IP addresses are anonymised. If you decline, no analytics cookies are set and no measurement data is collected from your visit.

When you send an enquiry

If you write to us by email, WhatsApp, or through the booking form, we keep your message and contact details for as long as we need them to reply, host you, and meet the tax and accommodation-registry obligations Italian law places on us as hosts.

When you stay with us

Italian law requires us to verify identity at check-in and to report guest details to the Questura within 24 hours of arrival. This is a legal obligation we cannot opt out of. Guest registration data is held only for as long as the law requires.

Cookies

The site uses one optional category of cookies: analytics, set by Google Analytics 4 when you accept on the consent banner. They expire after at most 14 months. No advertising, retargeting, or personalisation cookies are used on this site.

You can change your mind at any time:

Your rights

Under the GDPR, you can ask us to confirm what we hold about you, correct it, delete it, restrict how we use it, or send it to another provider. Write to info@palazzopalloni.com and we will reply within 30 days. If you are unhappy with our response, you may also lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it).

Third parties

The site is hosted on Netlify (United States, with EU regions). Bookings and guest communications are processed by Hospitable (United States) under Standard Contractual Clauses. Analytics, when consented, are processed by Google (United States), also under Standard Contractual Clauses. Each acts as a processor under our instructions.

Changes

If we change anything material on this page, we will update the date at the top.