Skip to main content

PRIVACY POLICY

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA

(ai sensi del Regolamento UE 2016/679 – GDPR e D. Lgs. 196/2003 come modificato dal

D. Lgs. 101/2018)

  1. Data Controller
    The Data Controller of the personal data is:
    Agriturismo Casale degli Orti – Azienda Agricola Dainelli Francesca
    Località San Lorenzo, 525
    58017 Pitigliano (GR) – Italy
    VAT No.: 01479100537
    Tax Code: DNLFNC87M58G716C
    Email: casaledegliortiagriturismo@gmail.com
    Phone: +39 338 5342655
  2. Types of data processed
    The website of Agriturismo Casale degli Orti may collect the following categories of
    personal data:
    A) Data voluntarily provided by the user
    First and last name
    Email address
    Phone number
    Data entered in the contact form
    Data entered in the online booking system
    Billing data (address, tax code, VAT number)
    B) Data collected during the booking and stay process
    Full personal details of the guests
    Identity document details
    Nationality
    Data relating to the stay
    C) Browsing data
    IP address
    Technical information about the device
    Access logs
  3. Purpose of processing
    Personal data are processed for the following purposes:
    Responding to requests for information sent through the contact form
    Managing bookings and the performance of the accommodation contract
    Complying with tax, administrative and accounting obligations
    Complying with public security obligations, including communication to the Police Headquarters through the Alloggiati Web portal
    Complying with statistical obligations, including the transmission of ISTAT data through the regional portal
    Managing any pre-stay and post-stay requests
    Protecting the rights of the Data Controller in legal proceedings
    Sending informative or promotional communications, only with prior explicit consent
  4. Legal basis for processing
    Processing is lawful as it is based on:
    Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR)
    Compliance with legal obligations (Art. 6.1.c GDPR)
    Consent of the data subject (Art. 6.1.a GDPR)
    Legitimate interest of the Data Controller (Art. 6.1.f GDPR)
  5. Processing methods
    Processing is carried out using electronic and paper-based tools, in compliance with the principles of:
    lawfulness, fairness, transparency, minimisation, integrity and confidentiality.
    Appropriate technical and organisational security measures are adopted to prevent unauthorised access, loss or unlawful disclosure of data.
  6. Use of the management system and booking engine
    Agriturismo Casale degli Orti uses the Kross Booking management system and booking engine, provided by Solutions Plus S.r.l., with registered and operational office at Strada Prov.le Bitonto – Aeroporto Palese 28, 70128 Bari Palese, Italy.
    Solutions Plus S.r.l. acts as Data Processor pursuant to Art. 28 of the GDPR. The data entered into the booking engine are processed in accordance with the respective privacy policies and the security measures adopted by the service provider.
  7. Disclosure of data to third parties
    Data may be disclosed to:
    Public Security Authorities (Police Headquarters)
    Regional statistical bodies and ISTAT
    Tax and accounting consultants
    IT service providers (hosting, email, management system)
    Banks or payment systems
    These parties operate either as Data Processors or independent Data Controllers.
  8. Transfer of data outside the EU
    Where the website uses third-party services, such as Google, Meta or online payment systems, data may be transferred to non-EU countries in compliance with the safeguards provided for by Articles 44 et seq. of the GDPR.
  9. Retention period
    Data will be retained:
    For the time necessary to provide the service
    For 10 years for tax and accounting purposes
    For the periods required by public security regulations
    Until consent is withdrawn for marketing purposes
  10. Rights of the data subject
    The data subject may exercise the rights provided for under Articles 15–22 of the GDPR:
    Access to personal data
    Rectification
    Erasure
    Restriction of processing
    Objection
    Data portability
    Requests may be sent to:
    casaledegliortiagriturismo@gmail.com

A complaint may be lodged with the Italian Data Protection Authority.

COOKIE POLICY

  1. What cookies are
    Cookies are small text files that websites send to the user’s device in order to improve the browsing experience.
  2. Types of cookies used
    A) Technical cookies (necessary)
    These allow the website and the online booking system to function properly.
    They do not require consent.
    Examples:
    Session cookies
    Browsing cookies
    Cookies necessary for the operation of the booking engine
    B) Analytics cookies
    The website may use traffic analysis tools, such as Google Analytics with IP anonymisation.
    C) Profiling and marketing cookies
    Third-party tools, such as Meta Pixel or Google Ads, may be used for advertising purposes.
    These cookies are activated only with the user’s prior consent.
  3. Consent management
    Upon first accessing the website, a dedicated banner allows users to:
    Accept all cookies
    Reject non-essential cookies
    Customise their preferences
    Users may modify or withdraw their consent at any time through the dedicated function available on the website.
  4. Disabilitazione tramite browser
    È possibile disabilitare i cookie tramite le impostazioni del proprio browser.