Privacy Policy

SOCIETA’ AGRICOLA OSTIGNANO DI ROMAGNOLI ROBERTO & C. IN A.S.

This leaflet is addressed to all subjects who share their personal data with Società Agricola Ostignano di Romagnoli Roberto & C. in a.s. in order to express their interest in one of the services offered on the website www.villaostignano.com, pursuant to Articles 13 and 14 of the EU Regulation 679/2016 (hereinafter "GDPR").

The "owner" of the processing

The Data Controller is Societa' Agricola Ostignano di Romagnoli Roberto & C. in a.s. Via delle Colline 23, 50050 Montaione (FI), Italy. For any further information or clarification, the company can be contacted at the email address info@villaostignano.com .

Personal data subject to processing

The data collected by filling in the appropriate forms sent by e-mail to the customer such as name, surname, place and date of birth, tax code, VAT number, telephone number, postal address and elements of personal identification, fall into the category of "personal data" pursuant to Article 4, paragraph 1 and 15 of the GDPR and will be processed exclusively for the purpose of obtaining the information necessary for invoicing and/or registration and/or contact information.

Purpose of processing and legal basis of processing

The personal data of those who spontaneously fill in the appropriate forms are processed:

  • For purposes related to the booking of one or more rooms within the holiday home with subsequent storage in order to facilitate any further bookings
  • For promotional purposes (subject to specific consent)

In order to correctly send contact information via e-mail info@villaostignano.it, the user must give his or her consent to the processing of any special data categories, by filling in the specific field in the body of the email received. Any special data provided will be processed only with the consent. The consent is freely revocable at any time, without prejudice to the lawfulness of the processing carried out before the revocation, by sending an e-mail to the above address.

Recipients of personal data

The personal data processed will not be disseminated, but will be communicated to clearly defined subjects, such as the employees of Società Agricola Ostignano di Romagnoli Roberto & C. in a.s. specifically authorised to process the data. Based on their roles and work duties, the employees are entitled to process data within the limits of their competence and in accordance with the instructions given by the Owner. The same data may be communicated to subjects who are entitled to access them on the basis of legal provisions, regulations and standards.

Data storage methods

The data are processed with manual, electronics and computer means and with methods strictly related to the purposes for which the data are processed and in any case in compliance with the provisions of Article 32 GDPR on security measures.

Period of data retention

Personal data are stored for the period necessary to achieve the specific purposes for which they are processed.

Transfer of personal data

The Data Controller does not transfer personal data to third countries or to international organisations.

Rights of the data subject

At any time, the interested party may exercise the rights provided for in Articles 15-22 of the GDPR against Società Agricola Ostignano di Romagnoli Roberto & C. in a.s. by e-mail to the address info@villaostignano.it. In order to guarantee the correct exercise of the rights, the interested party must make themselves unequivocally identifiable. In particular, the interested party may exercise:

  • Right of access, which consists in the possibility to request verification of the use of personal data and, if so, to obtain access and a copy of the same in intelligible form;
  • Right of rectification, which authorises data subjects to request the correction of inaccurate personal data;
  • Right of erasure if the data no longer need to be processed for the original reason for which they were collected or subsequently processed; Right to object to processing and obligation to erase resulting from a legal obligation or due to unlawfulness of processing;
  • Right to restriction of processing;
  • Right to data portability, which gives the right to obtain the data in a structured, commonly used and readable format for transmission to another data controller without hindrance from the previous one.

In any case, the interested party may revoke any consent given to the processing of personal data for the purposes of commercial communications and advertising, as well as present a complaint to the competent control authority (Guarantor for the protection of personal data), pursuant to art. 77 of the Regulation, if he/she believes that the processing of his/her data is contrary to the legislation in force.