Privacy Policy

This information is provided in compliance with Art. 13 of Regulation 2016/679 (GDPR), pursuant to Art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code) and relates to all personal data processed according to the procedures indicated below.
Data Controller
The Data Controller for the Personal Data collected is: Agriturismo Musignano
Operating office: Via Poggio Tondo, 12 - 50050 Stabbia - Cerreto Guidi - Firenze - Toscana - Italia
Owner's email address: agriturismo@musignano.it

Types of Data Collected

Full details on each type of data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of the site. Unless otherwise specified, all requested Data is mandatory. If the User refuses to communicate it, it may be impossible to provide the service. In cases where some Data is optional, Users are free to refrain from communicating such Data without any consequence on the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Owner. Any use of Cookies, or other tracking tools, by the site or by the owners of third-party services used, unless otherwise specified, is intended to provide the Service requested by the User. The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through the site and guarantees the right to communicate or disseminate them, releasing the Owner from any liability toward third parties.

 

METHODS AND PLACE OF PROCESSING THE COLLECTED DATA

Purposes of Processing the Collected Data

User data is collected to allow the Owner to provide its Services, as well as for the following purposes: Statistics, Newsletter, Personalized Advertising, Accounting, Content and functionality performance testing, Interaction with social networks and external platforms, Displaying content from external platforms, and interaction with data collection platforms and other third parties. To obtain further detailed information on the purposes of the processing and the Personal Data concretely relevant for each purpose, the User may refer to the relevant sections of this document.

 

Processing Methods

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using computers and/or IT-enabled tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, other parties involved in the organization of the company (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) may have access to the data, appointed, if necessary, as Data Processors by the Owner. The updated list of Data Processors can always be requested from the Data Controller.

Legal Basis of Processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

  • The user has given consent for one or more specific purposes;

  • Processing is necessary for the performance of a contract with the user and/or for the execution of pre-contractual measures;

  • Processing is necessary to comply with a legal obligation to which the Owner is subject;

  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Owner;

  • Processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.

Place

The Data is processed at the Owner’s operating offices and in any other place where the parties involved in the processing are located. Personal Data may be transferred to a country other than the one in which the User is located. The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization (such as the UN), as well as the security measures adopted by the Owner to protect the Data.

Retention Period

Data is processed and stored for the time required by the purposes for which it was collected:

  • Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of such contract is completed.

  • Personal Data collected for purposes related to the Owner’s legitimate interest will be retained until such interest is satisfied.

  • When processing is based on User consent, the Owner may store Personal Data longer until such consent is revoked, unless a legal obligation requires a longer period. At the end of the retention period, Personal Data will be deleted.

Details on the Processing of Personal Data

Mailing List or Newsletter

By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, may be transmitted.

Personal Data collected: email, first name, and last name.

Contact Form

By filling out the contact form with their Data, the User consents to its use to respond to requests for information, quotes, or any other nature indicated by the form header.

Personal Data collected: first and last name, email (mandatory), phone, and various types of Data.

Interaction with social networks and external platforms

This type of service allows interactions with social networks, or other external platforms, directly from this site (e.g., Facebook or YouTube widgets).

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Statistics (Google Analytics)

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out.

User Rights

Pursuant to Articles 15 – 21 of EU Regulation 2016/679, each interested party is recognized a series of rights:

  • Right of Access: The right to obtain confirmation as to whether or not personal data concerning them is being processed and to obtain a copy.

  • Right to Rectification: The right to obtain the correction of inaccurate personal data.

  • Right to Erasure: The right to obtain the deletion of personal data without undue delay.

  • Right to Restriction of Processing: The right to obtain the limitation of processing under certain conditions.

  • Right to Data Portability: The right to receive personal data in a structured, commonly used, and machine-readable format.

  • Right to Object: The right to object to the processing of personal data for specific reasons.

The interested party also has the right to lodge a complaint with the competent supervisory authority (Garante della Privacy). Requests should be addressed in writing to the Data Controller.

Cookie