Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF THE EU REGULATION / 679/2016 (GDPR)
PREMISES AND GENERAL INFORMATION

PREMISES AND GENERAL INFORMATION

Our company believes that the protection of personal data and the privacy of our users are absolutely important. This privacy policy document indicates all useful information to allow the user to understand what data we collect, why we collect them and how we use them, in compliance with applicable legislation.

In case of further information or any questions you can contact us directly via the telephone numbers at the bottom of the page or by email info@agriturismoilpratone.com

This document can be printed using the print command present in the settings of any browser.

DEFINITIONS

The address of our website is: https://www.agriturismoilpratone.com

  • “User” is the actual or potential purchaser of the products or services that holds the status of consumer, meaning the natural and legal persons who make the purchase and act for purposes unrelated to any business or professional activity carried out;
  • “Site” is the set of web pages relating to AGRITURISMOILPRATONE.COM

1. DATA CONTROLLER

Owner of the processing of personal data collected through the use of the online booking service (hereinafter, “Service”) and through the website www.agriturismoilpratone.com (hereinafter, “Site”) for Italian users is: Agriturismo Il Pratone, Podere Samanta 74 – Montegemoli Pomarance (PI) Tuscany Italy – VAT number 01776540500, available and contactable through the “Information-> Contacts” section, or through the telephone numbers at the bottom of the page, or by email info@agriturismoilpratone.com (hereinafter “Company”)

2. DATA PROCESSED

2.1 DATA COLLECTED THROUGH THE SITE

For the consultation of the “public” part of the Site (ie the one freely accessible by each user), no provision of the user’s personal data is required. Following the mere navigation in the publicly accessible pages of the Site, some navigation data may in any case be automatically collected the following information which is stored in the log files of the server (hosting) of the Site:

  • internet protocol (IP) address;
  • browser type;
  • parameters of the device used to connect to the Site;
  • name of the internet service provider (ISP);
  • URI (Uniform Resource Identifier) ​​of the requested resources
  • visit date and time;
  • web page of origin of the visitor (referral) and exit;
  • possibly the number of clicks;

The navigation data relates to the user’s operating system and IT environment, the transmission of which is implicit in the use of Internet communication protocols.

The Company uses a third-party tool (Google Analytics) for statistical and marketing purposes only. However, the data is managed in a completely anonymized form. Although this information is not collected to be associated with identified interested parties, by their nature they could, through processing and association with data held by third parties, allow users to be identified. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, and are deleted immediately after processing

These data are used for statistical and analytical purposes, in an exclusively aggregated form. The IP address is used exclusively for security purposes and is not crossed with any other data.

This Site also incorporates plugins and / or buttons to our social links and / or specialized booking platforms. When you visit a page of our website that contains a plugin, your browser connects directly to the servers of the social network from which the plugin is loaded, which server can track your visit to our website and, if necessary, associate it. to your social media account, in particular if you are logged in at the time of the visit or if you have recently surfed on one of the websites containing social plugins. If you do not want the social network to record the data relating to your visit to our website, you must log out of your social network account and, probably, delete the cookies that the social network has installed in your browser.

Plugins are installed on this Site with advanced privacy protection functions for Users, which do not send cookies or access the cookies on the User’s browser when the page is opened but only after clicking on the plugin.

The collection and use of information by these third parties are governed by their respective privacy policies to which please refer.

For more information on the use of cookies through the Site, please read the Company’s Cookie Policy at the following link.

To access to the reserved content part of the Site, or for any contact with the Company by the user through, for example, sending e-mail messages to the Company’s addresses indicated on the Site, the user’s data must be considered acquired and, therefore, treated in full compliance with current legislation. These data may include those provided during registration on the Site and use of restricted areas, such as (in addition to the personal data already indicated), username, password, security questions and related answers, any documents uploaded, etc.

The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the personal data included in the message, necessary to respond to requests, therefore it follows that failure to provide them will make it impossible to obtain what is requested.

The data collected can be processed for activities strictly related to the satisfaction of the requests addressed to the Company..

2.2 DATA COLLECTED THROUGH THE SERVICE

The Company only collects personal data that the user voluntarily provides by registering with or using the Service. Among the data provided voluntarily by the user through the use of the Service, personal data may be acquired such as:

  • first name;
    last name;
  • tax code and / or VAT number;
  • residential and / or domicile address;
  • date of birth;
  • email address;
  • phone numbers;
  • recipient code;
  • pec;

The Site may collect other data in case of voluntary use of services by users, such as commenting, communication services (contact forms, comment boxes, newsletters), and will be used exclusively for the provision of the requested service.

For the management of the newsletter, double explicit consent is activated (double opt-in) which includes an additional confirmation step for the verification of consent on each email address using the Mailchimp platform; the data is transferred to the service manager for the provision of the service itself and the processing takes place in the manner specified by the Mailchimp Privacy Policy.

3. FINALITÀ DEL TRATTAMENTO

The Company processes the personal data that the user has provided through the Service or the Site exclusively in connection with the use of the Service or the Site itself. In particular, the user’s personal data can be used for the following purposes:

a) provision of the online booking service and Site features, such as registration, access to restricted areas, communication with the Company, etc. offered by the Site;

b) processing of payment and billing data: the Company will process the user’s personal data only to facilitate purchases relating to the Service and to process payments made, including through the Site; in no way will the Company acquire the user’s bank details as each payment will be made via Paypal or other third-party payment platforms;

c) sending information about the Service, such as, for example, payment status, booking confirmation, etc. and updates on the functionality of the Site, or informative newsletters via e-mail if the user has given his explicit consent;

4. STORAGE OF PERSONAL DATA

The data collected by the Site during its operation are kept for the time strictly necessary to carry out the specified activities. Upon expiration or when the user requests the deletion of their personal data, the data will be deleted or anonymised, unless there are further purposes for the conservation of the same (for example if they must be kept in order to comply with a legal obligation or establish, exercise or defend legitimate claims).

5. SECURITY AND TRANSFER OF PERSONAL DATA

We treat visitor / user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. We are committed to protecting the security of your personal data during their transmission, using the Secure Sockets Layer (SSL), which encrypts information in transit. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of employees involved in the organization of the site or external parties (such as third party technical service providers, hosting providers) may have access to the data.

5.1 PLACE OF TREATMENT

The data collected by the site are processed at the headquarters of the Data Controller, and allocated at the datacenter of the web Hosting ONE.COM located in Denmark; ONE.COM as a representative in the European Union is in charge of receiving and managing all matters relating to processing, in order to ensure compliance with data protection regulations.

5.2 TRANSFER OF COLLECTED DATA TO THIRD PARTIES

The data collected by the site is generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in the cases provided for by law; if it is necessary for the provision of a specific service requested by the User; for carrying out security checks or site optimization.

5.3 TRANSFER OF DATA TO NON-EU COUNTRIES

This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook (Facebook, Instagram) and Microsoft (Linkedin, Bing) through social plugins and the Google Analytics service. The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, (here the information page of the Italian Guarantor) for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

6. USER RIGHTS

Pursuant to the European Regulation EU / 679/2016, the User can exercise the rights provided for in articles 15 to 22 and art. 34 of the EU / 679/2016 Regulation, in particular it has the rights to:

object in whole or in part, for legitimate reasons, to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;

  • access to personal data (Article 15 of the Regulation);
  • rectification of inaccurate personal data (Article 16 of the Regulation);
  • deletion of data in the presence of the conditions indicated in Article 17 of the Regulation;
  • limitation of processing in the presence of the conditions provided for in Article 18 of the Regulation;
  • portability of data concerning him (Article 20 of the Regulation);
  • oppose to automated processing, including profiling (Article 21 of the Regulation);
  • revoke the consent given for one or more purposes without prejudice to the lawfulness of the processing, based on the consent given before the revocation;
  • lodge a complaint with the National Supervisory Authority or the Guarantor for the protection of personal data, based in Piazza di Montecitorio no. 121, 00186 – Rome (Privacy Guarantor – link to the Guarantor page);

Requests should be addressed to the Data Controller;

7. COOKIE

This Site uses cookies, text files that are recorded on the user’s terminal or that allow access to information on the user’s terminal. Cookies allow information on visitor preferences to be stored, they are used in order to verify the correct functioning of the Site and to improve its functionality by customizing the content of the pages based on the type of browser used, or to simplify navigation by automating procedures (eg . Login, Site language), and finally for the analysis of the use of the Site by visitors.

For information relating to the use of cookies through the Site, please read the Company’s Cookie Policy at the following link.

8. SUBJECTS OF THE TREATMENT

The data controller pursuant to the laws in force is Agriturismo Il Pratone, Podere Samanta 74 – Montegemoli Pomarance (PI) Tuscany Italy – VAT number 01776540500, as site administrator (Webmaster), available and contactable through the “Information-> section. Contacts “, or through the telephone numbers at the bottom of the page, or by email info@agriturismoilpratone.com.

ONE.COM web hosting (One.com Group AB Reg.no. 559205-2400 City: Malmö), is responsible for allocating data on behalf of the owner, as also highlighted by the Data Processing Agreement document that can be viewed at this link. ONE.COM, as a company that carries out commercial activities in the European Economic Area, is required to comply with the GDPR and acts in compliance with European standards(ONE.COM privacy policy).

Google is appointed data processor, processing data on behalf of the owner (Google Analytics).