Privacy Policy

This Privacy Policy (referred to in the Privacy Policy) is provided, also pursuant to EU Regulation 2016/679 ("GDPR"), to those (referred to in the Privacy Policy as "Users") who connect to this website (the "Site") owned by the Data Controller, whose details are listed in section 7 of the Privacy Policy. This Privacy Policy aims to describe the processing of personal data of users who connect to the Site and/or use the features and services made accessible through the Site (for example, by way of example, participation in competitions and initiatives, receipt of commercial and advertising communications, etc.). This Privacy Policy applies only to this Site and not to other websites that may be accessible to Users via links found on the Site. Users are encouraged to read the Privacy Policy carefully before providing any personal information and/or completing any forms on the Site that require the entry of personal data.

1. TYPES OF DATA PROCESSED

The Site Owner may collect certain data, such as anonymous and aggregate information during Site navigation, name, surname, residence, gender, place and date of birth, User ID, password, email addresses, photos, and/or other personal data voluntarily provided by users through registration on communities, message boards, forums, and newsletters, by sending messages and/or emails, or when participating in contests and/or initiatives submitted by the user via the Site. The Site is accessible to users without the obligation to provide their personal data. However, some parts of the Site are accessible exclusively to registered users who have provided the data required for registration.

1.1 Browsing Data
The computer systems and software procedures used to operate the Site automatically acquire, during operation, certain information from the browser used, which is then implicitly transmitted when using Internet communication protocols. This information, by its nature, could, through association and processing with data held by third parties, allow the user's browser to be identified (e.g., IP address, domain names of computers used by users/visitors connecting to the site). This information may be used by the Site to obtain anonymous and aggregate statistical information on the use of the Site and to monitor its proper functioning. 
1.2 Personal data provided by users
To access some of the Site's services (newsletter subscription, forum access, participation in contests or other initiatives), Users may be asked to voluntarily enter certain personal data through registration forms (or other means). 
1.3 Cookies
The Site uses cookies. For more information on cookies, Users are invited to carefully read the specific Cookie Policy.

2. PURPOSE OF PROCESSING

The personal data of Site Users will be processed exclusively for the purposes and methods described in this Privacy Policy and in compliance with the applicable provisions of the Privacy Code. The processing of personal data may consist of one or more of the following operations: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication to third parties, blocking, deletion and/or destruction of personal data. In accordance with the user's expressed wishes, the processing of personal data will be carried out – depending on the case – for one or more of the following purposes:
1. allow navigation through the Site's public web pages;
2. respond to requests received through the email addresses made available to Users on the Site;
3. obtain anonymous and aggregate statistical information regarding Site navigation (e.g., analysis of the most visited pages);
4. Obtain anonymous statistical information on the geographic areas of origin of traffic to the Site, the type of device used, gender, and other statistical data;
5. Monitor the correct functioning of the Site;
6. Assess any liability in the event of unlawful acts committed against the Site;
7. Register users for certain Site services (newsletter, forum, etc.);
8. Fulfill contractual obligations for the requested service;
9. Marketing purposes;
10. Send advertising, technical, and promotional information via email.

3. PROCESSING METHODS

Data processing is carried out using automated tools (e.g., using electronic procedures and media) and/or manually for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in compliance with applicable regulatory provisions, in full compliance with the principles of confidentiality, fairness, necessity, relevance, lawfulness, and transparency imposed by the Privacy Code. Appropriate security measures will be observed to prevent the loss of Users' personal data and their unlawful or improper use. Your personal data will be retained for the period of time appropriate to the purposes for which it was collected or subsequently processed.

4. MANDATORY OR OPTIONAL NATURE OF DATA PROVISION

The provision of certain data by the user (indicated with an asterisk in the relevant online registration and data entry form) is necessary – depending on the case – to access certain restricted areas of the Site and/or to use certain specific services. Providing data for all other purposes (for example, for marketing purposes or to monitor website usage) is optional and therefore does not prevent access to the Site.

5. SCOPE OF DATA COMMUNICATION AND DISSEMINATION

In order to achieve the processing purposes (indicated in point 2 of this Privacy Policy) and to the extent strictly necessary, Users' personal data may be disclosed to employees and collaborators based on and within the limits of their assigned duties and responsibilities. Furthermore, Users' personal data may be disclosed to individuals appointed by the Data Controller to provide the services available on the site (IT system administrators, collaborators in the management and processing of the Site's data, administrative, tax, and accounting consultants, marketing consultants), other individuals responsible for ensuring the functioning of the services offered by the Site, and individuals authorized to access the user's personal data by law, regulation, and/or EU legislation. In any case, the user's personal data will not be disclosed.

Users have the right to exercise all the rights indicated in EU Regulation 2016/679 ("GDPR"). In particular, by making a request to the Site Owner, Users:
6.1. They have the right to obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, and communication of such data in an intelligible form.
6.2. They have the right to obtain information on:
a) the source of the personal data;
b) the purposes and methods of the processing;
c) the logic applied in the event of processing carried out with the aid of electronic means;
d) the identification details of the data controller and the designated Data Protection Officer;
e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing.
6.3. They have the right to obtain:
a) updating, rectification, or, where appropriate, integration of the data;
b) erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared with the right being protected.
6.4. They have the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
b) to the processing of personal data concerning them for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications.
Users may exercise the rights listed in Section 6 of the Privacy Policy, as well as obtain a complete and updated list of data controllers, by sending a letter by regular mail to the address listed in the following section (Section 7 of the Website Privacy Policy) or by sending an email to info@lafiorita-farmhouse.it Where applicable, Users also have the rights set forth in Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority. Users of this site can change their preferences at any time by clicking the "Privacy Settings" link at the bottom of the pages.

7. DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)

Iorio Neri
Via Milano, 4 - 53045 Montepulciano (SI)
Tel: +39 351 878 0557

We remind you that you can contact the DPO at any time and send any questions or requests regarding your personal data and the protection of your privacy by writing to info@lafiorita-farmhouse.it

8. DATA PROTECTION

The data is collected by the parties indicated in point 7, in accordance with the provisions of the relevant legislation, with particular regard to the security measures established by the GDPR (Article 32) for their processing using computerized, manual, and automated tools and with methods strictly related to the purposes indicated in point 2 and in any case in a manner that guarantees the security and confidentiality of the data.

9. CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be subject to changes and updates over time (including those related to the entry into force of new regulations, the updating or provision of new services). If substantial changes are made to the use of User data by the Data Controller, the latter will notify Users by publishing them prominently on its pages or through alternative or similar means. Users are also invited to periodically consult the Privacy Policy page to learn about any updates and changes.