Privacy Policy
Last updated: 11/05/2026
This policy describes how PalÈat Hospitality ("PalÈat", "we") processes the personal data of users of the PalMap website and app, in compliance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is PalÈat Hospitality. For requests or to exercise your rights, write to info@paleat.it.
2. Data collected
- Registration: first name, last name, email, hashed password, preferred language, structure code (if entered).
- PalTest: profile questionnaire answers (travel type, duration, food preferences, budget).
- Wishlist: IDs of saved places.
- PalTour: personalised itineraries generated and saved.
- Technical data: IP address, user agent, access logs, anonymous navigation data (PostHog/Sentry).
3. Purposes and legal basis
- Service delivery (contract, art. 6.1.b GDPR): account, itinerary generation, map access.
- Transactional communications (contract): welcome email, password reset, service notifications.
- Marketing (consent, art. 6.1.a): newsletter and promotional communications, only after explicit opt-in.
- Security and analytics (legitimate interest, art. 6.1.f): abuse protection, app improvement.
4. Retention
Account data is retained until account deletion. Technical logs are retained for up to 12 months. Analytics data is anonymised or aggregated.
5. Recipients and processors
Data may be processed by providers acting as data processors:
- Resend — transactional email delivery.
- OpenAI — auto-translation and auto-tagging (public pin texts only, never personal data).
- Hosting & CDN providers — app delivery.
- PostHog / Sentry — aggregated analytics and error monitoring.
6. Non-EU transfers
Some providers (e.g. Resend, OpenAI) may process data outside the EEA. In that case, transfers occur under the Standard Contractual Clauses approved by the EU Commission.
7. Your rights
You can exercise at any time your rights of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR) by writing to info@paleat.it. You also have the right to lodge a complaint with the supervisory authority.
8. Cookies
The app uses technical cookies (required) and analytics cookies (subject to your consent). You can manage preferences via the cookie banner on first visit or by clearing your browser cookies.