★ 4.86 · 97 reviews on AirbnbBook on AirbnbContact
Book
The deck of Penthouse Pallazzo
Home/Privacy Policy
Legal

Privacy Policy

How the Penthouse Pallazzo website handles personal data: the contact form, hosting, no trackers, and your rights under GDPR, LGPD, CCPA and Dominican law.

Last updated: 13 November 2026.

This policy explains what personal information this website collects, why, and what you can do about it. It covers the website at penthousepallazzo.com and its copy at penthouse-pallazzo.pages.dev.

Who is responsible

The website is operated for Penthouse Pallazzo, a vacation rental in the Zona Colonial of Santo Domingo, Dominican Republic. For privacy questions, use the contact form and write "Privacy" in the message.

What we collect

  • The contact form: your name, email address, the dates you mention and your message. We use them only to answer you.
  • Server logs: our host, Cloudflare, processes technical data such as IP address, browser type and the pages requested, to deliver the site and protect it from abuse.
  • Google Analytics 4, only if you accept: when you click Accept on the cookie notice, Google Analytics 4 counts visits (pages viewed, clicks on the booking buttons, a sent contact form, approximate location, device and browser) so we can see how the site is used. If you click Decline or do nothing, Google Analytics does not load and sets no cookies. The site uses no advertising cookies.
  • Bookings: when you book, you do it on Airbnb or Vrbo. Their privacy policies cover the data you give them.

We process contact-form data to answer your request (your consent and our legitimate interest in replying), server data for the security and operation of the site (legitimate interest), and Google Analytics data only with your consent. To withdraw consent, clear this site's cookies and stored data in your browser and choose Decline.

Who processes the data

  • Cloudflare, Inc. hosts the site and runs the contact form.
  • Resend, Inc. delivers contact-form messages by email.
  • Google LLC runs Google Analytics 4, only after you accept analytics cookies.

Both may process data outside your country, including in the United States, under their own safeguards such as standard contractual clauses.

Data retention

Contact-form messages are kept for as long as needed to handle your request and any stay that follows, and no longer than 24 months. Server logs are kept by Cloudflare for short periods under its own policy. Google Analytics data is kept for 14 months.

Your rights

Depending on where you live, including under the GDPR (European Union and United Kingdom), the LGPD (Brazil), the CCPA/CPRA (California) and Dominican Law 172-13 on personal data, you may ask to access, correct, delete or receive a copy of your data, object to or limit its use, and withdraw consent at any time. We do not sell or share personal information for cross-context advertising. To make a request, use the contact form. You may also complain to your local data-protection authority.

Children

The site is not directed to children under 16, and we do not knowingly collect their data.

Links to Airbnb, Vrbo, OpenStreetMap, Wikimedia Commons and other sites take you to services with their own privacy policies.

Changes

We will post any change on this page with a new date.

Book your stay