This notice describes how the personal data of users who visit and use the Park Hotel La Pineta website is processed, in compliance with Regulation (EU) 2016/679 (“GDPR”) and current legislation on the protection of personal data.

Data Controller

LA PINETA Srl
Via Cravilla, 50
54026 Groppoli di Mulazzo (MS) – Italy
Tax Code / VAT No.: 01185360458
Email: info@lapinetacravilla.com

Types of Data Processed

The site may collect personal data provided directly by the user or technical data generated during browsing.

In particular, the following may be processed:

• first and last name;
• email address;
• telephone number;
• information voluntarily entered in contact forms;
• data relating to requests for accommodation, restaurant, ceremonies, events, or other services;
• IP address and technical data relating to the browser and device used;
• browsing data;
• cookies and other technical identifiers, as described in the Cookie Policy.

The mandatory fields in the forms are necessary to properly handle the user’s request. Failure to provide such data may make it impossible to provide a response.

Purposes and Legal Bases of Processing

Personal data is processed for the following purposes:

• to respond to information requests sent through the forms on the site or by email;
• to manage requests relating to accommodation, restaurant, ceremonies, events, and services of the property;
• to carry out pre-contractual activities requested directly by the user;
• to fulfill administrative, tax, accounting, and legal obligations related to the services requested;
• to ensure the proper functioning and security of the site, preventing abuse, unauthorized access, and automated requests;
• to provide location services and directions via Google Maps;
• to perform statistical analysis on site usage, where analysis tools are activated and subject to user consent when required.

The processing is based, as applicable, on the performance of pre-contractual measures requested by the data subject, on compliance with legal obligations, on the legitimate interest of the Controller, or on the user’s consent when necessary.

Contact Forms and Anti-Spam Protection

The forms on the site allow users to send information requests to Park Hotel La Pineta.

To limit the automated sending of unwanted messages, technical tools integrated into the site are used, without resorting to external user verification services such as Google reCAPTCHA.

The data entered in the form is used exclusively to manage and respond to the request received and for any subsequent relationships that arise from it.

Bookings via External Platform

The buttons and links dedicated to booking may direct the user to an external platform used by Park Hotel La Pineta for managing availability and reservations.

Once the user has left this site, any data entered on the booking platform is processed according to the terms and privacy policy of the relevant provider.

Users are therefore invited to consult the privacy policy available on the platform before transmitting their personal data.

Google Maps

The site uses Google Maps to show the location of Park Hotel La Pineta and facilitate access to directions.

Displaying the map may involve the communication of technical data to Google and the use of cookies or similar technologies. When required by law, the service is activated only after obtaining the user’s consent.

For more information on data processing carried out by Google, please refer to the privacy policies made available by the relevant provider.

Google Analytics

The site may use Google Analytics to collect aggregate statistical information relating to browsing and use of the pages.

If the service uses cookies or other identifiers that are not strictly necessary, these are activated only after the user has given consent through the cookie preference management system.

The user can modify or withdraw consent at any time through the cookie settings available on the site.

Language Management

The site uses a multilingual system to allow the user to view content in the selected language.

For this purpose, technical cookies necessary to store the language chosen by the user and to maintain the correct language version during browsing may be used.

Such cookies are functional to the provision of the requested service and are not used for advertising or profiling purposes.

Fonts and Multimedia Content

The fonts used by the site are hosted locally on the server and do not involve, for their display, connections to Google Fonts servers.

Video content used on the site pages is also hosted locally and does not require automatic connection to external video platforms for playback.

Cookies and Tracking Tools

The site uses technical cookies necessary for its operation and may use, subject to user consent, cookies or similar tools relating to statistical services or third-party content.

For detailed information on the cookies used, their duration, their purposes, and how to modify or withdraw consent, please consult the Cookie Policy.

Processing Methods and Security

Personal data is processed using IT and telecommunications tools and through organizational procedures appropriate to the purposes indicated in this notice.

The Controller adopts technical and organizational measures to protect personal data from loss, unauthorized access, alteration, disclosure, or destruction.

Data Retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and, subsequently, for the period possibly required by current legislation.

Data transmitted through contact forms is retained for the time necessary to manage the request and any relationships arising from it, unless longer retention obligations are required by law.

Data Recipients

Personal data is not disclosed publicly.

Within the limits necessary for the purposes indicated in this notice, data may be communicated to:

• hosting and IT infrastructure service providers;
• site maintenance and technical support service providers;
• email and communication service providers;
• providers of the platform used for managing reservations;
• administrative, tax, and legal consultants;
• providers of statistical and technological services used by the site;
• public authorities, when required by law.

Entities that process data on behalf of the Controller are appointed as Data Processors when required by applicable law.

Transfer of Data Outside the European Economic Area

Some service providers used by the site may process personal data outside the European Economic Area.

In such cases, the transfer takes place in compliance with the conditions and safeguards provided for by Regulation (EU) 2016/679 and applicable law.

Rights of the Data Subject

The user may exercise, in the cases provided for by law, the following rights:

• obtain confirmation of the existence of personal data concerning them;
• access their personal data;
• obtain rectification or updating of data;
• request erasure of data;
• request restriction of processing;
• object to processing in the cases provided for by law;
• withdraw consent at any time previously given, without prejudice to the lawfulness of processing carried out before withdrawal;
• receive their data in a structured, commonly used, and machine-readable format, where applicable;
• lodge a complaint with the Data Protection Authority.

How to Exercise Your Rights

To exercise the rights provided for by law or to request information on the processing of personal data, you may contact the Controller at:

info@lapinetacravilla.com

Data Provided Voluntarily by the User

The voluntary sending of messages through the site forms or by email involves the acquisition of the data communicated by the user, necessary to respond to the request.

Users are invited not to transmit special categories of personal data or particularly sensitive information through the site forms, unless strictly necessary.

Technical Logs

For requirements related to operation, security, and maintenance, the site and related technical services may record logs containing information such as IP address, date and time of requests, browser used, and other technical data.

Changes to the Privacy Policy

This Privacy Policy may be updated following regulatory, technical, or organizational changes or the introduction, modification, or removal of services used by the site.

Users are invited to periodically consult this page to check for any updates.

Last updated: September 2026