Privacy & Cookie policy

www.palazzoparma.it

Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and applicable Italian legislation.

Thank you for visiting our website palazzoparma.it (hereinafter also referred to as the Site). This privacy policy is intended to inform you about how your personal data are processed when you browse the Site and interact with the services offered. The information is provided pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018 (Italian Privacy Code).

This notice applies exclusively to the website palazzoparma.it. Any third-party websites linked via hyperlinks (for example, the Palazzo Parma Instagram page or other social media platforms) have their own privacy policies, which we invite you to consult. Palazzo Parma assumes no responsibility for data independently collected by third parties outside of our Site.

Controller of Data Processing

The controller of the personal data collected through the Site is Immobiliare Beneficium S.r.l., with registered office at Piazzale Barezzi 3, 43121 Parma (PR), Italy, VAT No. 02913570343, represented by its legal representative pro tempore.
Controller contact details: you may contact Immobiliare Beneficium S.r.l. for any request regarding the processing of your personal data at the following address:

Types of personal data collected

While browsing and interacting with the Site, we may collect and process various categories of personal data concerning you, in particular:

  • Browsing data: the IT systems and software procedures that ensure the operation of the Site automatically acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes, for example, IP addresses or domain names of the devices used by users, URI/URL addresses of requested resources, the time of the request, the method used to submit the request to the server, the HTTP response code (success/error), and other parameters related to the user’s operating system and IT environment. This information is not collected to identify you, but could potentially allow your identification through processing and association with data held by third parties.
  • Data voluntarily provided by the user: personal data that you choose to provide through the Site:
    • Contact details for newsletter subscription: first name, last name, and email address submitted via the dedicated subscription form available on the Contacts page (or elsewhere on the Site) to receive updates and news about Palazzo Parma.
    • Data sent via spontaneous communications: any personal data you provide by sending messages to the email addresses listed on the Site (e.g., information requests to info@palazzoparma.it). In such cases, we may process the contents of your message, including communication metadata (e.g., your email address, date and time of the email), and any other data you voluntarily include.
    • Data for job applications (“Work with us”): if you choose to apply for collaborations or job positions via the Work with us section, we will process the data included in your CV and/or application form (for example: personal details, contact information, education and work history, photograph, and any other information you voluntarily provide to apply). If the application is submitted via email, we will process the data contained in the CV and the email text. We invite you to provide only relevant and non-excessive data (it is preferable to avoid including special categories of data such as racial or ethnic origin, political opinions, health status, etc., unless strictly required for the selection process).
    • Data for bookings (if applicable): in the event that the Site offers online booking features for stays, events, or other services at Palazzo Parma in the future, the data necessary to manage the booking will be collected. Such data may include: first and last name, contact information (email, phone), booking details (arrival/departure dates, number of guests, specific requests), as well as any payment data if a deposit or online payment is required.
  • Cookies and tracking data: certain information is also collected through the Site by means of cookies and similar tracking tools. Cookies are small text files that may be installed on your device when you visit the Site; they are useful for ensuring its functionality and for collecting information about your user experience. The use of cookies and their purposes is described in detail later, in the “Cookies” section of this Policy. In general, through cookies we may process data such as online identifiers (e.g., session ID, language preference), information about the device and browser, browsing activity on the Site, and – only with prior consent – anonymous statistics regarding Site usage.
  • Data collected through Google reCAPTCHA: To protect our Site from spam, abuse, and fraudulent activities, we use the Google reCAPTCHA service. This service verifies that the interaction with the Site is carried out by a human user and not by a bot. The use of reCAPTCHA involves the collection of hardware and software information, device data, web-based data, and interaction data. These include, by way of example, IP address, browser data, operating system, screen resolution, selected language, mouse movements, clicks, and keys pressed during the interaction. We invite you to consult Google’s privacy notices for more details on how Google processes data: Google Privacy Policy: https://policies.google.com/privacy and Google Terms of Service: https://policies.google.com/terms.
  • Use of the Google Fonts service: It is further specified that, for the correct display of typographic fonts, this Site uses the Google Fonts service provided by Google LLC. This service requires a connection to Google’s servers, resulting in the communication of your IP address to Google. This constitutes a transfer of personal data to the United States, legitimized by the adequacy decision “EU-U.S. Data Privacy Framework” (Art. 45 GDPR), to which Google LLC adheres. For more details, please refer to Google’s privacy policy and to the section below (“Data transfers abroad”).

Purposes of processing

The personal data indicated above are processed by the Data Controller for the following specific, explicit, and legitimate purposes:

  1. Browsing and operation of the Site: to enable the proper use of web pages and Site functionalities, ensure the delivery of online content requested by the user, and maintain the cybersecurity of the Site. This purpose includes the technical management of connections (including the use of strictly necessary technical browsing or session cookies), monitoring the proper functioning of the Site, and preventing abuse or fraudulent activities (also through the use of systems such as Google reCAPTCHA).
  2. Responding to user requests / Contacts: to manage and respond to any requests for information or assistance spontaneously sent by users (for example, by sending emails to the addresses indicated on the Site). The data provided (e.g., email address and content of the request) will be used exclusively to take charge of and follow up on the user’s communications.
  3. Newsletter subscription / promotional communications: to register your voluntary subscription to the Palazzo Parma newsletter and periodically send you emails with updates on the project, news, events, and initiatives related to Palazzo Parma. This purpose includes all activities related to the sending of informational and marketing communications regarding our services/projects, including the possible evaluation of basic parameters (e.g., number of subscribers, delivered emails, openings) to improve the service.
  4. Evaluation of job applications: to examine the profiles of candidates who send their CV or data via the Work with us section, in order to assess the establishment of an employment or collaboration relationship. This includes the possible retention of received CVs for future interviews or opportunities compatible with your profile, unless otherwise indicated by you.
  5. Management of hospitality service bookings (if applicable): if an online booking system is activated, the data provided will be processed to allow you to book stays, visits, or other services offered at Palazzo Parma, and to manage all related phases (booking confirmation, pre-arrival communications, possible payments, specific customer requests, etc.).
  6. Compliance with legal obligations: to process personal data when necessary to comply with obligations established by applicable laws, regulations, or EU legislation. For example, accounting and tax obligations in the case of bookings/purchases (issuing invoices, mandatory records), public safety obligations (guest registration in accommodation facilities), or the handling of any requests from Judicial Authorities.
  7. Protection of rights and legal defense: if necessary, to process data during pre-litigation and litigation phases to ascertain, exercise, or defend the Data Controller’s rights in court or before competent authorities, in case of violations, disputes, or controversies related to the use of the Site or related services. This purpose is pursued only in case of actual necessity and for information strictly relevant to the purpose (e.g., retention of browsing logs to verify fraudulent access, use of transaction information in case of disputes, etc.).

Lawfulness of Processing Conditions

For each of the purposes described above, the processing of your personal data is carried out on a specific legal basis provided by the GDPR. In particular:

  • Browsing and operation of the Site: the legal basis for processing is the legitimate interest of the Data Controller (Art. 6, para.1, letter f GDPR) in ensuring the proper functioning, security, and usability of its website. The use of necessary technical cookies is carried out pursuant to Art. 122 of Legislative Decree 196/2003 (as amended by Legislative Decree 101/2018), which allows the use of such cookies without requiring consent, as they are strictly necessary to provide the service requested by the user. Furthermore, with regard to any system logs and browsing data, processing is based on the legitimate interest in network security and the prevention of abuse, as well as compliance with any legal obligations related to cybersecurity. As for the use of Google reCAPTCHA, the legal basis is likewise our legitimate interest (Art. 6, para.1, letter f GDPR) in ensuring the security and integrity of the Site, preventing spam and abuse.
  • User contacts and information requests: the legal basis is the execution of pre-contractual measures adopted at the request of the data subject (Art. 6, para.1, letter b GDPR) – for example, if you write to us requesting information about the services/projects of Palazzo Parma, the processing of the data contained in your request is necessary in order to respond to you. In the absence of a contractual or pre-contractual relationship, the legitimate interest of the Data Controller in communicating with Site users may alternatively apply (Art. 6, para.1, letter f), an interest we consider prevailing as it reflects the reasonable expectation of the user to receive a response to their communications.
  • Newsletter subscription / promotional communications: the legal basis is the free, specific, and informed consent of the data subject (Art. 6, para.1, letter a GDPR). When entering your data to subscribe to the newsletter, you will be asked to provide consent for the processing of data for this purpose (for example, by ticking a box “I accept the Privacy Policy” in the form, once such mechanism is implemented). Without your consent, we will not send you any newsletter. You have the right to withdraw your consent at any time (see below “Rights of the Data Subject”), for example by clicking the unsubscribe link at the bottom of each email received, or by contacting us using the contact details provided. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
  • Evaluation of job applications: the processing of data contained in CVs or applications is necessary to follow up on your request to establish an employment/collaboration relationship. The main legal basis is therefore the execution of pre-contractual measures adopted at the request of the data subject (Art. 6, para.1, letter b GDPR), or, where the application is not in response to a specific open position but is spontaneous, the legitimate interest of the Data Controller in evaluating new potential collaborators (Art. 6, para.1, letter f). Any special categories of data (under Art. 9 GDPR) present in the CV will be processed only where strictly necessary to assess the candidate’s suitability, in accordance with Art. 111-bis of Legislative Decree 196/2003. In general, consent is not required for the processing of common data in CVs under Italian privacy law, except when the Data Controller intends to retain the CV for future selections beyond a certain period: in such cases, consent may be requested from the candidate or a specific additional notice may be provided. . .
  • Management of service bookings (possible future implementation): the legal basis will be the performance of a contract to which the data subject is party or of pre-contractual measures adopted at their request (Art. 6, para.1, letter b GDPR). The data you provide to book a stay or service will be used to fulfill your booking request and, if confirmed, to perform the contract for the provision of the tourism/accommodation service. At the same time, certain related processing activities may be based on legal obligations (e.g., registration of guest details pursuant to Public Safety regulations, tax obligations for payment documentation) – see next point.
  • Compliance with legal obligations: when we process data to comply with a legal requirement, the legal basis is the fulfillment of a legal obligation (Art. 6, para.1, letter c GDPR) to which the Data Controller is subject. This may concern, for example, the retention of accounting documentation (which includes personal data) for the legally required period, the communication of data to authorities in case of formal requests, etc. In such cases, the provision of data is mandatory, as it derives from legal provisions.
  • Protection of rights in legal proceedings: here too, the legal basis is the legitimate interest of the Data Controller (Art. 6, para.1, letter f) in defending or asserting its rights in the event of legal disputes. This interest is considered prevailing, when balanced against the rights of data subjects, and processing is limited to the minimum necessary (e.g., we retain data strictly relevant to proving facts in court).

Methods of processing and data retention period

Your personal data will be processed using both paper-based and electronic/IT tools. We adopt appropriate security measures to protect the data from unauthorized access, disclosure, alteration, or destruction. The processing is carried out in accordance with the principles of fairness, lawfulness, transparency, and protection of your privacy, in compliance with applicable regulations.

In particular, the data are processed by staff and collaborators of Palazzo Parma (Immobiliare Beneficium Srl) who are duly authorized and trained in data processing, as well as by any external providers appointed as Data Processors (see the following section “Disclosure to third parties…”). The data collected through the Site are stored primarily in digital format on secure IT systems.

Periodo di conservazione: Conserviamo i tuoi dati personali solo per il tempo strettamente necessario a conseguire le finalità per cui sono stati raccolti, fatto salvo ulteriori periodi di conservazione imposti da obblighi di legge (es. obblighi contabili) o derivanti dalla necessità di tutela dei diritti. Di seguito una panoramica dei tempi di conservazione applicati ai diversi dati/trattamenti:

  • Browsing data (e.g., server logs, IP addresses): typically retained for short periods—usually 7 days—unless extended retention is required due to security incidents. Security-related logs (e.g., intrusion detection) may be retained for up to 90 days, with possible extensions in case of investigations.
  • Technical session cookies: stored on your device only for the duration of the session (they expire when you close your browser), or for longer periods in the case of persistent technical cookies (e.g., language preference cookies, which may last several months). Specific cookie durations are detailed in the Cookie Policy section below.
  • Data provided through contact requests: the information you provide (e.g., email and message content) will be retained for the time needed to respond and fully manage your request. Afterwards, communications may be archived for an additional period of 6–12 months for internal organizational purposes, then deleted—unless a further relationship arises (e.g., becoming a client) or legal protection is required (e.g., disputes).
  • Newsletter data: your data (name, surname, email) used for sending newsletters will be retained until you unsubscribe or withdraw your consent. You may request removal from the mailing list at any time. Upon unsubscribing, your data will be promptly deleted from our lists (we may retain a record of your opt-out request to prevent further communications, if necessary). If no action is taken, we may periodically update and clean the subscriber database, removing addresses that have been inactive for a long time (e.g., more than 24 months since the last interaction), to ensure data accuracy and relevance.
  • Application data (CVs): CVs received will be retained for the time necessary to evaluate profiles and conduct any selection process. If the outcome is negative, we may retain your CV for approximately 12 months to consider your profile for future opportunities, after which it will be deleted—unless you request immediate deletion (which we will promptly carry out) or a working relationship is established (in which case the data will be included in your personnel file and retained according to employee data regulations).
  • Booking data (if collected via the Site in the future): booking-related data will be retained for the time necessary to manage the booking and provide the requested service. Afterwards, some of this data may be retained to comply with legal obligations (e.g., Public Security records for guests, fiscal documents for 10 years, etc.) or for legal protection (up to applicable limitation periods, typically 10 years). Data not needed beyond service provision (e.g., preferences, optional information) will be deleted or anonymized after the service is delivered.
  • Other data processed for legal obligations or legal defense: in case of disputes or legal requests requiring data retention, we will retain the data for the duration of the proceedings and for an additional 10 years following their conclusion (corresponding to standard limitation periods).

Once the above retention periods have expired, we will delete or anonymize personal data, unless further retention is required by order of an Authority or to exercise or defend our rights in legal proceedings (in such cases, only relevant data will be retained and solely for the time strictly necessary).

Disclosure to Third Parties and Data Recipients

Personal data collected through the Site may be accessed and processed, in compliance with the principle of data minimization, exclusively by authorized individuals and entities directly involved in the purposes outlined above. In particular, the data recipients may include:

  • Internal staff of the Controller: employees and collaborators of Immobiliare Beneficium Srl responsible for managing the Site, handling user requests, organizing newsletters, selecting personnel, or managing bookings. These individuals are duly authorized to process data and have received appropriate instructions regarding personal data protection.
  • Service providers (Data Processors): external third parties engaged by the Controller to operate the Site and related services, formally appointed as Data Processors pursuant to Article 28 of the GDPR. These may include, by way of example:
    • Hosting and IT provider: the company that provides web hosting services and maintenance of the WordPress platform and databases, physically storing the data (site files, databases including newsletter subscribers, logs) on its own servers. (For example: if the site is hosted by an Italian/European hosting service, such provider will process browsing data and data entered in forms as a Data Processor).
    • Newsletter/email marketing service provider (if external): if Immobiliare Beneficium Srl uses an external platform to send newsletters (e.g. MailChimp, SendinBlue, MailUp or similar), the subscriber data (name, surname, email) will be shared with such provider, which will process it on behalf of the Controller exclusively for the purpose of managing the delivery of informational emails. The relationship with this provider is governed by a contract compliant with Article 28 of the GDPR.
    • Online booking service providers (if applicable): in the event of integration of a third-party booking engine to manage reservations on the Site, booking data may be transmitted to such external platform (e.g. a hotel management system or channel manager), which will typically act as joint controller or data processor, depending on the agreements in place. It is the Controller’s responsibility to ensure that these entities also comply with privacy regulations.
    • External consultants and professionals: if necessary, the Controller may share certain data with external consultants (e.g. legal advisor, labor consultant, recruitment agency) when required for activities related to the purposes described above (for example, during a recruitment process we may involve HR consultants, or in case of legal disputes, data may be shared with our lawyers). These entities will process data either as independent controllers (e.g. when acting in their professional capacity) or as processors, where applicable.
  • Other independent third-party controllers: Personal data will not be subject to indiscriminate disclosure, but may be shared with additional entities when required by law or necessary to protect the rights of the Controller. This category includes:
    • Authorities and public bodies: if requested, we may disclose data to competent Authorities (e.g. law enforcement, judicial authorities, Data Protection Authority) in the event of orders, investigations, requests, or to comply with legal obligations.
    • Banks / payment service providers: to manage any payment transactions related to bookings or services offered, the necessary data (e.g. order details, amounts, account holder references) may be shared with banks or payment services involved in the process (this includes credit card companies, PayPal, or other gateways used). These entities act as independent controllers for their respective financial processing activities.
    • Group or affiliated companies (if any): currently, Palazzo Parma is a project managed by Immobiliare Beneficium Srl. Should other affiliated companies become involved in the future (e.g. commercial partners, affiliated companies for hospitality management), your data may be shared with them for the same purposes described herein. In such case, we will update this notice to include details of any joint controllers or new data controllers.

We ensure that third-party recipients of personal data are selected based on their reliability and expertise in data protection. With each of them, where required by the GDPR, we have entered into agreements that mandate compliance with security measures and the processing of data in accordance with the Controller’s instructions. Under no circumstances will data be sold or transferred to third parties for independent use (such as third-party marketing purposes) without your explicit consent.

Transfer of data abroad

Personal data is predominantly processed within the European Union.
The servers hosting the Website and its related databases are located in Italy or in countries within the EEA (European Economic Area). In general, Immobiliare Beneficium Srl prefers service providers based in the EU or in countries recognized as offering an adequate level of data protection.

Should specific needs require the transfer of certain data to countries outside the EU/EEA, the Controller ensures that such transfers will be carried out in compliance with Articles 44–49 of the GDPR. In particular, appropriate safeguards will be adopted to protect the data, such as: the use of Standard Contractual Clauses approved by the European Commission with the data recipient, verification of any adequacy decisions issued by the European Commission regarding the third country, or, where applicable, reliance on specific derogations provided for under Article 49 of the GDPR (e.g. your explicit consent, where permitted).

Some specific cases of potential international data transfers include:

  • Use of an email marketing service with servers located in the United States (e.g. MailChimp): in this case, newsletter subscriber data would be transferred to the USA. Such transfer will only occur if the provider ensures adequate safeguards (e.g. adherence to Standard Contractual Clauses and additional commitments to comply with EU regulations).
  • Use of analytics services or third-party tools (e.g. Google Analytics, Google Maps, social widgets, Google reCAPTCHA): these providers are based outside the EU (e.g. in the USA). In such cases, we will anonymize data where possible and enter into agreements that ensure GDPR-compliant protection.
  • If the user is located outside the EU and interacts with the Website (e.g. by subscribing to the newsletter): the transfer of their data to the EU is implicit in the provision of the requested service.
  • Use of the Google Fonts service: to ensure correct and consistent display of text fonts on this Website, we use Google Fonts, provided by Google LLC. The use of Google Fonts requires your browser to establish a direct connection with Google’s servers to correctly render the Website’s pages. Through this connection, Google becomes aware that our Website has been accessed via your IP address. The IP address is considered personal data and is technically necessary for Google’s servers to transmit font files to your browser. This data processing involves the transfer of your IP address to the United States, where Google LLC’s servers are located.
    This transfer is legitimized by Google LLC’s participation in the
    EU-U.S. Data Privacy Framework, i.e. the adequacy decision adopted by the European Commission pursuant to Article 45 of the GDPR, which ensures an adequate level of personal data protection. Despite the safeguards offered by this framework, please note that U.S. data protection legislation differs from that of the EU.
    For more information on Google’s data processing, please refer to their privacy policy:
    https://policies.google.com/privacy.

In any case, upon request (see Controller’s contact details), you may obtain further information on the specific safeguards adopted for data transfers to third countries

Data Subject Rights

As a data subject, you are entitled to a series of rights under the GDPR and applicable Italian legislation, which you may exercise at any time with respect to the Controller. In particular, you have the right to:

  • Access to your personal data (Art. 15 GDPR): you may request confirmation as to whether or not your personal data is being processed and, if so, obtain access to such data, receive a copy, and obtain information about the processing (e.g. purposes, categories of data, recipients, retention period, applicable rights, etc.).
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR): if you find that your data held by us is incorrect or incomplete, you have the right to have it corrected or completed.
  • Erasure / Right to be forgotten (Art. 17 GDPR): you may request the deletion of your personal data if one of the conditions set out by law is met (e.g. data is no longer necessary for the purposes, consent is withdrawn and no other legal basis applies, objection to processing for overriding reasons, unlawful processing, legal obligation to erase, etc.). Please note that the right to erasure is not absolute: for example, we cannot delete data that must be retained to comply with legal obligations or if necessary to establish or defend a legal claim.
  • Restriction of processing (Art. 18 GDPR): you have the right to obtain restriction (i.e. freezing) of processing in specific cases, such as when you contest the accuracy of the data (for the time needed to verify it), or when processing is unlawful but you oppose erasure and request restricted use instead, or when we no longer need the data but you require it for legal defense. In case of restriction, data will be processed—except for storage—only with your consent or for specific legal reasons .
  • Data portability (Art. 20 GDPR): for automated processing based on your consent or a contract, you may request to receive your personal data in a structured, commonly used, and machine-readable format, and you have the right to transmit it directly to another controller, where technically feasible. For example, you may request to transfer the newsletter subscription data you provided to Palazzo Parma to another service.
  • Objection to processing (Art. 21 GDPR): you have the right to object at any time, for reasons related to your particular situation, to the processing of your data based on legitimate interest. In such cases, unless we have compelling legitimate grounds (e.g. the need to continue processing to defend a legal claim), we will cease processing for those purposes. Where your data is processed for direct marketing purposes (e.g. newsletter delivery), you may object at any time and without justification: if you exercise this right, your data will no longer be used for such purposes (no more promotional communications).
  • Withdrawal of consent: where processing is based on your consent, you have the right to withdraw it at any time. Withdrawal will be effective going forward and does not affect the lawfulness of processing carried out before it. For example, you may use the unsubscribe link in the newsletter or contact us to revoke your consent to receive communications.
  • Lodging a complaint with the Supervisory Authority (Art. 77 GDPR): if you believe that your data is being processed in violation of the law, you have the right to file a complaint with the Supervisory Authority (in Italy: Garante per la Protezione dei Dati Personali –
    www.garanteprivacy.it), or with the authority of the EU country where you reside, work, or where the alleged violation occurred. You also retain the right to seek judicial remedy before the competent court (Art. 79 GDPR).

You may exercise your rights at any time by contacting the Controller using the contact details provided (preferably via email at info@palazzoparma.it). We will respond without undue delay and within the time limits established by law (normally within 1 month, extendable to 3 months in complex cases—in which case you will be informed of the reason for the extension).

Cookie Policy (Extended Information Notice on Cookies)

This section provides detailed information about the use of cookies and other tracking tools on the website palazzoparma.it.

What are cookies?

Cookies are small text files that websites send to the user’s device (typically to the browser), where they are stored and then sent back to the same websites upon subsequent visits. Cookies are useful because they allow a website to recognize the user’s device, remember preferences (e.g. language, login), and generally improve the browsing experience. There are various types of cookies: Technical cookies, which are necessary for the proper functioning of the website, analytics cookies, which collect aggregated data on how the website is used, profiling cookies, which track user browsing behavior and create profiles based on preferences, in order to deliver personalized advertising. Cookies can also be categorized as: First-party cookies, sent directly by the website being visited, third-party cookies, sent by external domains, for example when the website integrates elements from other services.

Cookies used by this Website

While browsing palazzoparma.it, the following cookies may be installed on your device:

  • Essential technical cookies (first-party): these are cookies strictly necessary for the functioning of the Website and for providing the requested service. This category includes, for example:
    • Session cookies (e.g. PHPSESSID): temporary cookies that ensure normal navigation and use of the Website, such as keeping the user connected to the server during the visit. These cookies are automatically deleted when the browser is closed.
    • Functionality cookies: used to remember any preferences set by the user on the Website, such as the selected display language. For example, if a multilingual plugin is active, we may use a cookie like pll_language, wp-wpml_current_language (or equivalents) to store the user’s preferred language (Italian or English) and avoid prompting for it on each visit. These cookies generally have a longer duration (e.g. 1 year) so that preferences are remembered across future sessions.
    • Cookie consent cookies: if and when a cookie management banner is implemented, once you express your preferences (acceptance/rejection of certain categories), a technical cookie will be stored to record your consent. This cookie (e.g. cookieconsent_status or similar) serves solely to register the expressed choice and is typically retained for 6–12 months.

These technical cookies do not require your consent, as the Website may not function properly without them. You may still disable them through your browser settings (see below), but please note that doing so may negatively affect your experience on the Website.

  • Third-party analytics cookies: currently, we do not use external analytics tools that install cookies. In the future, we may rely on third-party services to collect aggregated statistical data on the use of the Website (e.g. activation of Google Analytics or similar tools). Should this occur, such cookies will only be installed with your prior consent, in accordance with the guidelines of the Italian Data Protection Authority.
    • Google Analytics (Google LLC): a service that allows the collection of aggregated information on the number of users and how they interact with the Website, in order to improve its performance. Google Analytics primarily uses first-party cookies named _ga, _gid, and _gat: _ga is used to distinguish users (typical duration: 2 years) _gid is used to distinguish daily visits (duration: 24 hours) _gat is used to limit request frequency (duration: 1 minute). The data collected (IP address, device information, pages visited, time spent, etc.) is anonymized (e.g. partial IP masking) and used for statistical purposes. However, since Google may process this data on servers located in the United States, the use of Analytics on our Website will be subject to obtaining your consent and implementing appropriate safeguards for data protection.
      (If analytics cookies are used in the future, this Policy will be updated accordingly, and upon your first visit to the Website you will be asked to express your preferences regarding their use.)
  • Profiling/marketing cookies: currently, no cookies are used for the purpose of tracking user profiles or delivering targeted advertising. We are committed to not installing such cookies without first obtaining your specific and informed consent. Should we implement advertising or remarketing features in the future, we will inform you and request prior consent via the cookie banner.
  • Third-party cookies (social media and external content): the Website may include elements and plug-ins from third parties that result in the installation of cookies by those entities. For example:
    • If we embed videos via YouTube or Vimeo, cookies from these platforms (such as VISITOR_INFO1_LIVE, YSC for YouTube) may be set upon playback to track video views or personalize settings. To mitigate this, we may use YouTube’s “nocookie” option to limit tracking. In any case, such third-party cookies would only be installed after you actively click to play the content, thus constituting a voluntary action.
    • If we include a social feed (e.g. Instagram) or social sharing buttons (Facebook, Instagram, etc.), these may also set cookies to recognize your account (if you are logged into those platforms) and allow interaction with the plug-ins. These cookies fall under the responsibility of the respective third parties.
      Currently, the website palazzoparma.it only provides a link to the official Instagram page and does not embed direct social plug-ins or external content that stores cookies, except for a possible HTML5 video hosted on our own servers. Should we integrate external services with cookies in the future, they will be listed in this section.
    • Google reCAPTCHA: the Google reCAPTCHA service, used to protect against spam and abuse, may set cookies or use other tracking mechanisms to analyze user behavior and verify that the visitor is not a bot. These are third-party cookies/tools provided by Google. For more information, please refer to Google’s Privacy Policy.

Cookie Management Summary: Upon your first visit to the Website, if non-technical cookies are present, an informational banner will be displayed to request your consent. You will be able to choose which categories of cookies to accept (e.g. only technical cookies, or also analytics, etc.). You may modify your preferences at any time via a dedicated interface (a “Manage Cookies” link will be made available on the Website). In any case, you can also manage and disable cookies through your browser settings:

  • Browser management: Most browsers allow you to control, accept, or block cookies via their settings. For example, you can delete all stored cookies or configure blocks for specific sites or categories (e.g. third-party cookies). Below are links to instructions for major browsers:

Please note that completely disabling technical cookies may affect the proper functioning of this Website (e.g. certain features may become unavailable).

For more information about cookies and how to manage them, you can visit the independent website www.allaboutcookies.org (available in English)

Changes to this Privacy & Cookie Policy

This notice may be subject to revisions and updates over time, for example due to changes in the services offered or legal obligations related to privacy. We therefore encourage you to consult this page periodically. In the event of significant changes, we may also notify you through available channels (e.g. via a notice on the Website or by email to newsletter subscribers, if appropriate).

At the bottom of this notice, you will find the date of the last update, so you can verify the most recent version.

Last updated: 26/06/2025

Immobiliare Beneficium S.r.l. reaffirms its ongoing commitment to safeguarding user privacy and remains available for any clarification or to support the exercise of rights related to personal data protection.