(ai sensi dell’art. 13 Regolamento UE 2016/679 – GDPR)

1. Data Controller

Terra Piccinelli & C. Società semplice agricola
Via Monte Rosa 17, 21030 Brinzio (VA), Italia
P. IVA: 04074260128
Email: info@terrapiccinelli.it
PEC: terrapiccinelli@lamiapec.it

The Data Controller determines the purposes and means of processing personal data.
A Data Protection Officer (DPO) has not been appointed, as the conditions under Article 37 GDPR do not apply.

2. Categories of Personal Data

A seconda dell’utilizzo del sito, possono essere trattati:

• First name and last name
• Email address
• Telephone number
• Information voluntarily provided via contact forms or email
• Data necessary for accommodation or restaurant reservations (current or future)
• IP address and browsing data
• Data collected through cookies and tracking technologies

If online payments are implemented in the future, payment data will be processed exclusively by
external payment providers (e.g., Stripe). The Data Controller will not store credit card details.

3. Finalità e base giuridica del trattamento

I dati personali sono trattati per le seguenti finalità:

a) Responding to inquiries
Legal basis: Art. 6(1)(b) GDPR – pre-contractual measures.

b) Managing reservations (accommodation or restaurant)
Legal basis: Art. 6(1)(b) GDPR – performance of a contract.

c) Compliance with legal and administrative obligations
Legal basis: Art. 6(1)(c) GDPR – legal obligation.

d) Website security and proper functioning
Legal basis: Art. 6(1)(f) GDPR – legitimate interest.

e) Statistical analysis (e.g., Google Analytics)
Base giuridica: consenso dell’utente, ove richiesto (art. 6, par. 1, lett. a) GDPR).

f) Marketing communications (if activated in the future)
Base giuridica: consenso esplicito dell’interessato (art. 6, par. 1, lett. a) GDPR).

Il consenso può essere revocato in qualsiasi momento.

4. Nature of Data Provision

Providing personal data for contact requests or reservations is voluntary; however, failure to provide the required data may make it impossible to respond or manage bookings.

Il conferimento dei dati per finalità di marketing è sempre facoltativo.

5. Modalità di trattamento

Data are processed using electronic and IT tools in accordance with principles of lawfulness, fairness, transparency, and data minimization.

Appropriate technical and organizational measures are adopted to protect personal data from unauthorized access, disclosure, alteration, or destruction.

6. Data Retention

• Contact requests: up to 12 months
• Reservation and administrative data: for the period required by applicable tax and accounting laws
• Marketing data: until consent is withdrawn
• Technical and cookie data: according to the duration specified in the cookie settings

7. Recipients of Data

Data Processors, including:

• Hosting and IT providers
• Google LLC (Google Analytics)
• Meta Platforms Ireland Ltd. (Instagram e WhatsApp)
• Stripe Inc. (future payment provider)
• Accounting and tax consultants

I soggetti esterni operano, ove necessario, quali Responsabili del trattamento ai sensi dell’art. 28 GDPR.

8. Transfers Outside the EU

Some service providers may transfer personal data outside the European Union. Such transfers are carried out in accordance with GDPR safeguards, including Standard Contractual Clauses approved by the European Commission.

9. Diritti dell’interessato

Ai sensi degli artt. 15–22 GDPR, l’interessato può:

• Access their personal data
• Request rectification or erasure
• Request restriction of processing
• Object to processing
• Richiedere la portabilità dei dati
• Withdraw consent at any time

Requests may be sent to:
info@terrapiccinelli.it

Data subjects have the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 GDPR.

10. Social Media and WhatsApp

The website may include links or widgets to Instagram and a WhatsApp contact button. Interaction with these platforms may result in the processing of personal data by their respective providers. Users are encouraged to review the privacy policies of those services.

11. Updates

This Privacy Policy may be updated at any time. The latest version will always be available on this page.