Privacy and Cookie Policy

Last updated: 18/02/2026

1. Data Controller

The Data Controller for the personal data collected through the website www.residenceilcastiglio.it is:

Il Castiglio S.a.s. di Niccoli Daniele & C.
Via di Castiglioni, 1 – 51035 Pistoia (PT), Italy
VAT / Tax ID: 01476140478
Email: info@residenceilcastiglio.it

2. Types of data collected

In the course of normal browsing of the website, the Data Controller automatically collects certain data whose transmission is implicit in the use of Internet communication protocols (browsing data). The Data Controller also collects data voluntarily provided by the user (e.g. name, email, phone number, message content) through the contact form present on the site.

3. Purposes and legal basis of processing

Data is processed for the following purposes:

The legal basis is, depending on the case, the Data Controller's legitimate interest (technical operation of the site), the performance of pre-contractual measures at the data subject's request (handling of the contact form), or the data subject's consent (third-party cookies, collected through the banner described in point 9).

4. Browsing data and hosting

The website is built using WordPress technology and is hosted on SiteGround servers, with infrastructure located in Spain (European Union). The computer systems used to operate the website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser type, operating system).

5. Google Maps

The website embeds interactive maps provided by the Google Maps service (Google Ireland Limited). When a user views a page containing a map, the service may install its own cookies, independent of the Data Controller's will, and may involve the transmission to Google of the user's IP address and data relating to interaction with the map.

For more information: Google's privacy policy.

6. Google Fonts

The website uses open source Google Fonts, called via the graphic theme (Divi) directly from Google's CDN servers. Loading the fonts requires a connection to Google's servers, resulting in the transmission of the user's IP address, necessary for the correct graphic display of the pages.

7. Contact forms

The forms present on the site are configured without internal storage: requests are not saved in the site's database, but are sent via email to the Data Controller.

8. Cookies used by the website

CategoryPurposeConsent required
TechnicalBasic operation of the websiteNo
Third-party (Google Maps)Display of embedded mapsYes

9. Cookie consent management

On first access to the website, a banner is shown, managed through the Iubenda platform, allowing the user to accept, reject or customize the use of non-technical cookies. The user can change their preferences at any time through the consent management button present in the website's footer.

10. Processing methods and data security

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected, adopting adequate security measures to prevent unauthorized access, disclosure, alteration or destruction of the data.

11. Data retention period

Data sent through the contact form is retained for the time strictly necessary to handle the request, in accordance with the storage limitation principle set out in Art. 5(1)(e) GDPR. Data may be retained for a further period where necessary to comply with legal obligations or to protect the Data Controller's rights in court. Technical logs are retained according to the hosting provider's policies.

12. Data subject's rights

Under Articles 15-22 of Regulation (EU) 2016/679 (GDPR), the user has the right to obtain, at any time, access to their data, rectification, erasure, restriction of processing, data portability, and the right to object to processing, as well as the right to lodge a complaint with the Data Protection Authority. Requests may be sent to info@residenceilcastiglio.it.

13. Data transfer outside the EU

Some third-party providers referenced in this policy (Google) may transfer the collected data to servers located outside the European Economic Area. Such transfers take place on the basis of appropriate contractual safeguards (Standard Contractual Clauses) adopted by the providers themselves, in compliance with applicable law.

14. Changes to this policy

The Data Controller reserves the right to make changes to this policy at any time, giving notice to users on this page. Users are therefore encouraged to check this page regularly, referring to the last update date shown above.