Privacy Policy
This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and Article 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code) and relates to all personal data processed according to the methods described below.
Data Controller
The Data Controller of the collected Personal Data is:
Agriturismo Podere Galieni
Registered office: Località Bagnano Pomine 27, 50052 Certaldo (FI) – Tuscany – Italy
Controller’s email address: info@poderegalieni.it
VAT Number: 06219310486
Types of Data Collected
Full details on each type of data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using the website.
Unless otherwise specified, all requested Data are mandatory. If the User refuses to provide them, it may be impossible to provide the Service. Where certain Data are optional, Users are free not to provide them without affecting the availability or functioning of the Service.
Users who are unsure which Data are mandatory are encouraged to contact the Controller.
Any use of Cookies or other tracking tools by this website or by third-party service providers, unless otherwise specified, is intended to provide the Service requested by the User.
The User assumes responsibility for any third-party Personal Data obtained, published, or shared through the website and guarantees that they have the right to communicate or distribute it, releasing the Controller from any liability toward third parties.
METHODS AND PLACE OF PROCESSING OF COLLECTED DATA
Purpose of Data Processing
User data are collected to allow the Controller to provide its Services, as well as for the following purposes:
Statistics, Newsletter, Personalized Advertising, Accounting, Performance testing of content and features, Interaction with social networks and external platforms, Displaying content from external platforms, and interaction with data collection platforms and other third parties.
For further detailed information on the purposes of processing and the Personal Data relevant to each purpose, Users may refer to the relevant sections of this document.
Methods of Processing
The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Data processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
In addition to the Controller, in some cases, other parties involved in the organization of the website (administrative, commercial, marketing staff, legal advisors, system administrators) or external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to the Data and may be appointed, if necessary, as Data Processors by the Controller.
An updated list of Data Processors may always be requested from the Controller.
Legal Basis for Processing
The Controller processes Personal Data relating to the User if one of the following conditions applies:
– the User has given consent for one or more specific purposes;
– processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
– processing is necessary for compliance with a legal obligation to which the Controller is subject;
– processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.
Users may always request clarification from the Controller regarding the specific legal basis of each processing activity.
Place of Processing
Data are processed at the Controller’s operating offices and in any other place where the parties involved in the processing are located.
Retention Period
Data are processed and stored for as long as required by the purposes for which they were collected.
Personal Data collected for contractual purposes will be retained until the contract has been fully performed.
When processing is based on consent, Personal Data may be retained until consent is withdrawn.
The Controller may also be required to retain Personal Data for a longer period in compliance with legal obligations or by order of an authority.
Once the retention period expires, Personal Data will be deleted.
Details on the Processing of Personal Data
Mailing List or Newsletter
By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, may be sent.
Personal Data collected: email, first and last name.
Contact Form
By filling out the contact form with their Data, Users consent to their use to respond to requests for information, quotes, or any other type of request indicated in the form.
Personal Data collected: first and last name, email (mandatory), phone number, and other data.
Interaction with Social Networks and External Platforms
These services allow interaction with social networks or external platforms directly from the website.
Personal Data collected: Cookies and Usage Data.
Statistics
The website may use analytics services to monitor and analyze web traffic.
Personal Data collected: Cookies and Usage Data.
User Rights
Pursuant to Articles 15–21 of Regulation (EU) 2016/679, Users have the following rights:
- Right of Access
- Right to Rectification
- Right to Erasure
- Right to Restriction of Processing
- Right to Data Portability
- Right to Object
Users also have the right to lodge a complaint with the competent supervisory authority.
Requests must be submitted in writing to the Data Controller at: info@poderegalieni.it