Privacy policy
Last Update: February 24, 2025
Agriturismo Cà del Re (hereinafter, “we” or “the Data Controller”) is committed to protecting the privacy of users who visit our website www.agriturismocadelre.it (hereinafter, “Website”).
This Privacy Policy describes how we collect, use, share, and protect users’ personal data in compliance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and other applicable data protection laws.
If you have any questions or requests regarding the processing of your personal data, you can contact us using the details provided in the “Contact” section.
1. Data Controller
The Data Controller for personal data processing is:
Castello di Verduno SSA
Via Umberto I, 9
12060 – Verduno (CN)
P.IVA: 01043180049
Codice Fiscale: 91000320043
Rea: CN-213287
Privacy email: info@agriturismocadelre.it
2. Types of Personal Data Processed
During interaction with our Website and services, we may collect and process the following categories of personal data:
Data voluntarily provided by the user
When filling out the contact form, we collect:
- First and last name
- Email address
- Phone number
Data collected automatically
While browsing our Website, we automatically collect certain information through cookies and analytics tools, including:
- IP address (anonymized, if configured)
- Browser type and device used
- Pages visited and duration of the visit
- Interactions with the Website
More details on the use of cookies and tracking tools are available in our Cookie Policy.
3. Purpose and Legal Basis of Data Processing
We process personal data exclusively for legitimate purposes and in compliance with current regulations.
- Managing bookings and responding to information requests: If a user contacts us via the website form or books a stay or experience, we use their data to provide the requested information or confirm the booking. Legal basis: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- Legal compliance and tax obligations: Some booking-related information is retained to comply with tax and accounting regulations, as well as legal obligations related to security and public authorities. Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
- Sending marketing communications: If the user provides consent, we may send emails with offers, updates, or promotions related to our services. Consent can be withdrawn at any time. Legal basis: User consent (Art. 6(1)(a) GDPR).
- Traffic analysis and user experience improvement: We use analytics tools such as Google Analytics to collect statistical data on user behavior on our Website. Legal basis: User consent (Art. 6(1)(a) GDPR), collected through the cookie banner. If the user does not consent, analytical cookies will not be activated.
- Managing cookie consent: Through Cookie-Script.com, we collect and store user consent regarding the use of cookies to comply with GDPR legal obligations (Art. 6(1)(c) GDPR).
4. Who Do We Share Your Data With?
Your personal data is not sold or transferred to third parties for marketing purposes. However, we use external service providers who process data on our behalf as Data Processors under Art. 28 GDPR.
The main service providers we work with are:
- Slope.it → for room booking management.
- WineAround.com → for booking activities and experiences.
- Mailjet.com → for sending transactional emails and booking confirmations.
- Google Analytics → for analyzing Website traffic and improving the user experience (anonymized data, if configured).
- Cookie-Script.com → for managing the cookie banner and collecting user consent.
These providers are contractually bound to process data exclusively on our behalf while ensuring appropriate protection measures.
5. Data Transfer Outside the EU
Some service providers, such as Google Analytics and Mailjet, may process data outside the European Union. In such cases, data transfer occurs in compliance with the Standard Contractual Clauses (SCC) approved by the European Commission or other appropriate data protection measures.
6. Data Retention
We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, in compliance with applicable regulations:
- Booking data: retained for the duration required by tax regulations (10 years).
- Contact data for information requests: retained for up to 12 months.
- Marketing data: retained for up to 24 months unless consent is withdrawn.
- Data collected through cookies: according to the timeframes specified in our Cookie Policy.
7. Data Security
We implement technical and organizational security measures to protect personal data, including:
- Encryption of communications via HTTPS
- Protection against unauthorized access
- Use of GDPR-compliant providers
8. User Rights
Users have the right to:
- Access their personal data.
- Request the correction of inaccurate or incomplete data.
- Request the deletion of data unless legal obligations prevent it.
- Restrict data processing in certain circumstances.
- Obtain data in a portable format and transfer it to another controller.
- Withdraw consent for data processing for marketing purposes.
Requests can be sent to info@agriturismocadelre.it. Requests will be processed within 30 days.
9. Minors Under 16
Our services are not intended for minors under 16. We do not knowingly collect data from minors. If a parent believes that their child has provided us with personal data, they can contact us to request its deletion.
10. Changes to the Privacy Policy
If changes significantly affect users’ rights or the way we process data, users will be informed via a notice on the Website or, where appropriate, via email.
11. Contact
Agriturismo Cà del Re
Address: Via Umberto I, 9 – 12060 – Verduno (CN)
Privacy email: info@agriturismocadelre.it