Privacy Policy
Last updated: 15 May 2026
This Privacy Policy describes how the website www.tuscanyvillarent.com processes the personal data of users who browse the website or use the contact, availability request, quotation request and booking request forms relating to Villa del Cuculo, a luxury villa for rent in Palaia, in the province of Pisa, Tuscany.
This information is provided pursuant to Articles 13 and 14 of Regulation EU 2016/679, the “GDPR”, and applies exclusively to the website www.tuscanyvillarent.com.
1. Data Controller
The Data Controller is:
Studio SBS di Marini Alessio
Corso Matteotti 53
56038 Ponsacco (PI) – Italy
Phone: +39 0587 735528
Email: info@tuscanyvillarent.com
For any request concerning the processing of personal data, users may contact the Data Controller at the email address indicated above.
2. Types of personal data processed
The website may process the following categories of personal data.
Browsing data
The computer systems and software procedures used to operate the website may acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
This category may include, by way of example:
- IP address;
- browser type and device used;
- operating system;
- pages visited;
- date and time of access;
- addresses of the requested resources;
- technical data relating to the operation of the website.
These data are used to allow correct browsing of the website, ensure system security, obtain aggregated statistical information on website use and prevent abuse or unlawful use.
Data voluntarily provided by the user
When the user fills in the forms available on the website, sends a request by email or contacts the property by telephone, the personal data necessary to respond to the request may be processed.
By way of example, the following data may be collected:
- name and surname;
- email address;
- telephone number;
- address, city, province, postal code and country;
- requested check-in and check-out dates;
- number of adults and children;
- preferences or information entered in the message field;
- data necessary for preparing quotations, contracts or communications relating to the stay.
The optional, explicit and voluntary sending of messages to the addresses indicated on the website entails the acquisition of the sender’s email address, which is necessary in order to reply, as well as any additional personal data included in the communication.
Data collected through cookies and tracking tools
The website may use technical cookies, analytics cookies and, where enabled, third-party tracking tools for statistical, advertising or conversion measurement purposes.
For further information on the types of cookies used, their purposes and how consent is managed, users may consult the website’s Cookie Policy.
3. Purposes and legal bases of processing
Personal data are processed for the following purposes.
Browsing and technical operation of the website
Browsing data are processed to allow the website to function correctly, display pages, ensure IT security and carry out technical maintenance.
Legal basis: the legitimate interest of the Data Controller in ensuring the operation, security and protection of the website.
Responding to requests for information, availability and quotations
Data entered in the forms or communicated by email or telephone are used to respond to the user’s requests, provide information about the villa, check availability, prepare quotations and manage any preliminary communications.
Legal basis: performance of pre-contractual measures requested by the data subject.
Management of booking requests and contractual relationship
Data may be used to prepare, send and manage quotations, tourist rental contracts, communications relating to the stay and any obligations connected to the booking request.
Legal basis: performance of pre-contractual or contractual measures; compliance with legal obligations, where applicable.
Administrative, tax and legal obligations
Some data may be processed in order to comply with applicable legal requirements, for administrative, accounting and tax purposes, or to respond to requests from competent authorities.
Legal basis: compliance with legal obligations.
Security, prevention of abuse and protection of rights
Data may be processed to prevent fraud, abuse, unauthorised access, improper use of the website or to establish, exercise or defend a right in judicial or extrajudicial proceedings.
Legal basis: the legitimate interest of the Data Controller in ensuring security and protecting its rights.
Statistics and traffic analysis
The website may use analytics tools to understand how users interact with the pages, improve content, verify website functionality and optimise the browsing experience.
When analytics tools are configured to collect aggregated or anonymised data and do not allow the direct identification of the user, the processing may be based on the legitimate interest of the Data Controller in improving the website.
Where, on the other hand, the tools used involve non-technical tracking, profiling, data sharing with third parties or activities that are not strictly necessary, processing is carried out on the basis of the user’s consent.
Marketing, remarketing and conversion tracking
Where advertising pixels, remarketing systems or conversion tracking tools linked to advertising platforms are active, data may be processed to measure the effectiveness of campaigns, show relevant ads or create custom audiences.
Legal basis: the user’s consent.
The user may withdraw consent at any time through the cookie banner or cookie preference management panel, where available.
4. Nature of data provision
The provision of data in the contact, information request, availability request, quotation request or booking request forms is necessary to allow the Data Controller to respond to the user’s request.
Failure to provide the data marked as mandatory may make it impossible to send the request or manage the booking.
The provision of data through cookies or non-technical tracking tools is optional and subject to the user’s consent.
5. Processing methods
Personal data are processed using IT, electronic and, where necessary, paper-based tools, according to principles strictly related to the purposes indicated above.
The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, unlawful use, disclosure, alteration or destruction.
6. Parties who may process the data
Personal data may be processed by:
- staff or collaborators authorised by the Data Controller;
- technical and IT service providers;
- hosting providers;
- parties responsible for website maintenance;
- administrative, tax or legal consultants;
- service providers connected to the management of requests and bookings;
- public authorities, where required by law.
External parties who process personal data on behalf of the Data Controller are appointed, where necessary, as Data Processors pursuant to Article 28 of the GDPR.
The updated list of Data Processors may be requested from the Data Controller by writing to the email address indicated in this Privacy Policy.
7. Third-party services and tools
The website may use services provided by third parties, which may process personal data according to their respective privacy policies.
By way of example, the website may use:
- self-hosted WordPress, for website management;
- hosting providers, for the technical infrastructure;
- Google Tag Manager, for managing tags and scripts on the website;
- Google Analytics 4, for traffic statistics and analysis;
- Meta Pixel / Meta Events Manager, where active, for advertising measurement and conversions;
- WordPress Stats, where active, for browsing statistics;
- Google Fonts and/or Font Awesome, where loaded from external servers, for displaying fonts and icons;
- any technical plugins or tools for managing forms, availability requests and booking requests.
Third-party services must be listed in this Privacy Policy only if they are actually installed and active on the website.
8. Transfer of data outside the European Economic Area
Some service providers used by the website may process personal data in countries outside the European Economic Area.
In such cases, the transfer will take place in compliance with the safeguards provided for by the GDPR, including adequacy decisions by the European Commission, Standard Contractual Clauses or other appropriate measures provided for by applicable law.
Users may request further information on data transfers by contacting the Data Controller.
9. Data retention period
Personal data are retained for the time necessary to achieve the purposes for which they were collected.
In particular:
- data collected through contact, information request or quotation request forms are retained for the time necessary to respond to the request and manage any subsequent communications;
- data relating to booking requests, quotations and contracts are retained for the time necessary to manage the relationship and, subsequently, for the period required by applicable civil, tax and accounting obligations;
- data processed on the basis of consent are retained until consent is withdrawn, without prejudice to any further legal obligations;
- technical and log data are retained for the time necessary to ensure security, maintenance and proper operation of the website;
- data used for the protection of rights may be retained for the time necessary to establish, exercise or defend a right.
At the end of the retention period, the data will be deleted or anonymised, unless further retention is necessary to comply with legal obligations or to protect the rights of the Data Controller.
10. Cookies and tracking tools
The website uses cookies and similar tools to ensure the technical functioning of the pages and, where applicable, for statistical or advertising purposes.
Technical cookies are necessary for the operation of the website and do not require the user’s consent.
Analytics cookies, if configured in aggregated form and with appropriate data minimisation measures, may be treated as technical cookies under the applicable legislation.
Cookies and tracking tools used for profiling, marketing, remarketing, behavioural advertising or non-strictly technical analysis are installed only with the user’s prior consent.
Users may manage or modify their preferences through the cookie banner or the appropriate consent management panel, where available.
For further details, please refer to the website’s Cookie Policy.
11. Rights of the data subject
The user, as data subject, has the right to:
- access their personal data;
- request the rectification of inaccurate data;
- request the erasure of data, in the cases provided for by law;
- request the restriction of processing;
- object to processing, where applicable;
- receive the data in a structured, commonly used and machine-readable format, where applicable;
- withdraw any consent given, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the competent Data Protection Authority.
To exercise these rights, the user may send a request to the Data Controller at:
The Data Controller will respond to requests within the time limits provided for by applicable law.
12. Complaint to the Data Protection Authority
Users who believe that the processing of their personal data is carried out in breach of the applicable legislation have the right to lodge a complaint with the competent Data Protection Authority.
For users located in Italy, the competent authority is the Garante per la protezione dei dati personali, according to the procedures indicated on the Authority’s official website.
13. Links to external websites
The website may contain links to third-party websites. This Privacy Policy does not apply to such websites, which may have their own privacy policies and cookie policies.
The Data Controller is not responsible for the processing of personal data carried out by external websites that may be reached through links on www.tuscanyvillarent.com.
14. Changes to this Privacy Policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time, including as a result of changes in legislation, technical updates or organisational changes.
Users are invited to consult this page periodically, referring to the date of the last update indicated above.
