Last updated: 30 October 2026
This notice explains how we process the personal data of visitors to www.palazzoborghese.it and of anyone who contacts us, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
Yorkitalia S.r.l., Via Ghibellina 110, 50122 Florence, Italy, VAT 04200370486. Email: info@palazzoborghese.it – Tel. +39 055 2396293.
What data we process
- Browsing data: IP address, browser type, pages visited and technical data collected by the IT systems that run the website.
- Data you provide: name, contact details and information about the event that you send us through the contact form, by email, phone or WhatsApp to request information, a quote or a visit. Data sent through the form reaches us by email and is not stored on the website; the form uses an anti-spam question and requires no cookies.
- Cookies and similar tools: technical, statistical and third-party cookies, described in the Cookie Policy. Non-technical cookies are activated only with your consent.
Please do not send us unnecessary data. If you tell us about guests’ dietary or health requirements for the event (e.g. allergies), we process them only to organise the service and only with the consent of the people concerned.
Why we process data and on what legal basis
- Replying to enquiries and preparing quotes and proposals: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Organising the event and managing the contract, including invoicing and accounting: performance of the contract and legal obligations (Art. 6(1)(b) and (c)).
- Aggregated visitor statistics (Google Analytics): consent (Art. 6(1)(a)), which you may withdraw at any time.
- Displaying the map (Google Maps): consent (Art. 6(1)(a)).
- Website security and protection of our rights: legitimate interest (Art. 6(1)(f)).
We do not use your data to send you promotional communications without your specific consent and we do not sell it to third parties. We do not carry out automated decision-making or profiling.
If you choose to message us on WhatsApp, the service is provided by WhatsApp Ireland Ltd (Meta group), which processes data as an independent controller under its own privacy policy. We use WhatsApp only to reply to your request; you can always email us instead.
Who we share data with
Data is processed by our authorised staff and may be shared, only for the purposes stated, with: our hosting and email provider (Aruba S.p.A., Italy); Google Ireland Ltd for statistics and maps, if you consent; tax and legal advisers; suppliers involved in the event you request (e.g. set-ups, technical services), limited to the data they need. Suppliers that process data on our behalf are appointed as processors under Art. 28 GDPR.
Transfers outside the EU
Some services (Google, Meta/WhatsApp) may involve transferring data to the United States. In such cases the transfer is based on the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
How long we keep data
- Enquiries and quotes not followed by a contract: 24 months from the last contact.
- Contractual, tax and accounting data: 10 years, as required by law.
- Statistical data: for the duration stated in the Cookie Policy.
Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw your cookie consent via the “Manage consent” link on the website, without affecting processing already carried out. To exercise your rights, write to info@palazzoborghese.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Related organisations
Borghese Social Club ETS, Teatro Nazionale Firenze and Palazzo Le Stanze are separate entities with their own websites and privacy notices: links to their websites do not involve any sharing of your data.
Changes
This notice may be updated: the date at the top shows the latest revision.