Cookie & Privacy

INFORMATION NOTICE PURSUANT TO ARTS. 13-14 EU REG. NO. 2016/679 ON THE PROCESSING OF PERSONAL DATA

Dear visitor,

AGRITURISMO AL TRALCIO - Via Forneletti, 901 - Valeggio sul Mincio (VR) hereby informs you that, pursuant to Articles 13 and 14 of the European Regulation No. 2016/679 GDPR, the data collected and/or provided by you will be processed in compliance with the regulations referred to below.

ROLES

The Data Controller is: AGRITURISMO AL TRALCIO - Via Forneletti, 901 - Valeggio sul Mincio (VR), info@agriturismoaltralcio.com

PROCESSING METHODS

The processing consists, for example, of operations of collection, recording, organization, storage, extraction, consultation, use, communication, deletion of personal data. It is carried out, for the above purposes, according to the principles (pursuant to art. 5 of GDPR no. 2016/679) of lawfulness, fairness, transparency, data minimization, and accuracy. Data are processed through telephone, paper, IT and telematic methods. Processing takes place using suitable tools, technical and organizational measures adequate to ensure security, integrity, and confidentiality, in particular avoiding the risk of loss, unauthorized access, unlawful use, dissemination, in compliance with art. 32 of GDPR no. 2016/679, by persons authorized and in accordance with the provisions of art. 29 of GDPR no. 2016/679 and art. 2-quaterdecies of the Privacy Code.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO PROVIDE DATA

The provision of data for mandatory purposes does not require explicit consent. Without such data, we will not be able to provide our services. The provision of data for other purposes is optional and requires your explicit consent. In case of refusal, you will not receive newsletters, informational material, or commercial communications concerning services offered by the Controller or third parties. However, you will still have access to our services.

We process your personal information only when there is a legal basis for such processing. Legal bases include:

• Your consent to the processing activities in question
• Compliance with legal obligations we are required to meet
• Execution of rules established by laws or regulations, or contracts, agreements, or other legal instruments
• Studies conducted by research bodies, preferably on anonymized personal information
• Execution of a contract and related pre-contractual obligations, if you are a party to such contract
• Exercise of our rights in legal proceedings, administrative procedures, or arbitrations
• Defense or protection of your or a third party's physical safety
• Protection of health, in the context of procedures implemented by healthcare entities or professionals
• Our legitimate interest, provided your rights and fundamental freedoms do not prevail over such interests
• Credit protection

DATA ACCESS

Your data may be accessed for the purposes described below:

• By the employees and collaborators of the Controller in their capacity as data processors and/or system administrators;
• By third-party companies or other entities (for example: professional studios, consultants, software providers, credit institutions, insurance companies, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as external data processors.

Among the Personal Data collected by this Website, independently or through third parties, there are: Tracking Tools; Usage Data; name; email; website; unique advertising device identifiers; number of Users; city; device information; session statistics; browser information; responses to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events.

DATA COMMUNICATION

The Controller may communicate your data to Public Administration, Supervisory Bodies and/or Judicial Authorities, as well as to all other subjects to whom the communication is mandatory or necessary by law. Your data will not be disseminated.

DATA RETENTION

All personal data provided will be processed in compliance with the principles of lawfulness, fairness, relevance, and proportionality, exclusively with the necessary methods, including IT and telematic, to pursue the above purposes. Personal data will be stored for a period of 6 years following the last contact with the data subject or until a request for deletion by the same. In such case, data related to the legitimate interest of the controller or necessary for the fulfillment of legal obligations may still be retained. It is noted that the IT systems used for managing the collected information are configured, from the origin, to minimize the use of personal data.

As a data subject, you have the rights under Articles 15 and 77 of the GDPR, namely:

To obtain from the data controller confirmation whether or not personal data concerning you are being processed and, if so, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organizations; where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period; if the data are not collected from you, all available information as to their source; the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

To obtain from the controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement;

To obtain from the controller information relating to your personal data without undue delay if one of the following grounds applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw your consent on which the processing is based and there is no other legal ground for processing; you object to the processing and there are no overriding legitimate grounds to continue; the personal data have been unlawfully processed; the personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject;

To obtain restriction of processing where one of the following applies: the accuracy of the personal data is contested by you; the processing is unlawful and you oppose erasure and request restriction instead; the controller no longer needs the data for processing but you require them for legal claims; you have objected to processing pending verification of legitimate grounds;

To receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance, where technically feasible;

To object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f), including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling to the extent it relates to direct marketing;

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;

The right to lodge a complaint with a supervisory authority under Article 77 GDPR.

You may exercise your rights at any time by contacting the Controller at the following email address: info@agriturismoaltralcio.com

The updated list of external data processors and persons in charge of processing is kept at the registered office of the Data Controller.

This privacy notice was drafted on 01-07-2025 and may be updated over time due to legislative or regulatory changes. The data subject is invited to consult this page regularly.