TRANSPARENCY AND DATA PROTECTION

Privacy Policy

This Privacy Policy explains how personal data may be processed when visitors access the website of Un Riflesso nel Mondo, a privately managed holiday rental in the municipality of Marliana (PT), Tuscany, Italy.

This information is provided pursuant to Articles 12 and 13 of Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).

1. Data Controller

The data controller is Luciano Pontillo, the individual responsible for the privately managed holiday rental "Un Riflesso nel Mondo".

Property address: Via Fagno 86, 51010 Pian Dell'aurora (PT), Municipality of Marliana, Tuscany, Italy.

For questions concerning personal data protection, please contact: unriflessonelmondo@gmail.com.

2. Categories of Personal Data

Technical browsing data

When visitors access the website, the systems used to deliver and protect its pages may process technical information such as IP addresses, request dates and times, requested resources, browser information and data related to connection operation and security.

Information voluntarily provided

If a visitor sends an email to the privacy contact address, the sender's email address, message content and any personal information voluntarily included may be processed.

The website does not provide contact forms, user registration, direct payment facilities or an internal booking system.

3. Purposes and Legal Bases

Personal data may be processed for the following purposes:

• Delivering website pages and ensuring their proper technical operation, based on the legitimate interest in operating the service.
• Maintaining website security and preventing misuse, based on the legitimate interest in protecting the service.
• Responding to privacy-related requests and complying with applicable legal obligations, under the relevant legal bases, including Article 6(1)(c) and Article 6(1)(f) of the GDPR, where applicable.

4. Provision of Personal Data

Technical data necessary to establish a connection may be processed as part of normal website operation. Sending an email is voluntary; however, without sufficient contact details or information, it may not be possible to respond.

5. Hosting and Data Recipients

This website is published using Cloudflare Pages. Cloudflare may process technical information related to website delivery, network operation and security.

Email communications are handled through the email service used by the data controller.

Technical service providers involved in operating the website may process data on behalf of the controller or for their own purposes, depending on their respective roles and applicable terms. Provider information should be kept up to date when services change.

6. Links to External Services

This website contains links to Airbnb and Vrbo, the external platforms used for accommodation enquiries and bookings.

It also contains external links to Google Maps to help visitors view the property's location.

These services are not embedded directly in the website pages through interactive maps or integrated booking systems.

When visitors choose to follow an external link, they access a service operated by a third party, subject to that operator's terms and privacy policy.

7. Cookies and Similar Technologies

The website does not intentionally include advertising cookies or visitor profiling tools operated by the data controller.

The website delivery and security infrastructure may use technical cookies or similar technologies in certain circumstances. Further information is provided in the Cookie Policy.

For further information, please read our Cookie Policy.

8. Data Retention

Technical data may be processed for the period necessary to operate and protect the website, in accordance with the applicable hosting provider's settings and conditions.

Routine correspondence received at the privacy email address is generally retained for 12 months after the relevant request has been closed.

Longer retention may be necessary to comply with legal obligations, demonstrate compliance with specific requirements or protect legal rights, within the limits permitted by law.

For technical data processed by service providers, retention periods and criteria depend on the services and configurations actually used. These details should be verified and updated when necessary.

9. International Data Transfers

The use of international technology providers may involve processing or transfers of personal data outside the European Economic Area.

Any transfers outside the European Economic Area must comply with applicable safeguards, such as adequacy decisions or standard contractual clauses where relevant. Actual destinations and safeguards depend on the services and agreements in use.

10. Data Subject Rights

Subject to the conditions and limitations established by the GDPR, individuals may exercise the following rights:

• Access to their personal data.
• Rectification of inaccurate data.
• Erasure of personal data.
• Restriction of processing.
• Data portability, where applicable.
• Objection to processing, where applicable.

Requests may be sent to unriflessonelmondo@gmail.com.

Individuals also have the right to lodge a complaint with a competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali: www.garanteprivacy.it.

11. Automated Decision-Making

The website does not provide for automated decision-making or profiling activities operated by the data controller.

12. Updates to This Policy

This Privacy Policy may be updated to reflect technical, organisational or regulatory changes. The updated version will be made available on this page.

Last updated: 4 November 2026.