Privacy policy

Privacy Policy on the Processing of Personal Data

Effective date: 18 March 2026

Introduction

This information is provided pursuant to Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 30 June 2003 n. 196), as well as the Guidelines of the Italian Data Protection Authority (including the Guidelines for combating spam issued on July 4, 2013).

Data Controller:
Società Agricola Badia di Campoleone S.r.l.
Loc. Castelluccio, 38 – Capolona (AR), Tuscany – Italy
VAT number: IT01633340516
Phone: +39 0575 24372 | +39 393 9275645
Email: info@badiacampoleone.it

Website:
https://www.badiadicampoleone.com/en/

The Data Controller has not appointed a Data Protection Officer (DPO). Any request can be sent directly to the Data Controller.

General Information

This document describes how your personal data is processed, including legal bases, whether data provision is mandatory, and the consequences of refusal.

Site Registration

The Site does not offer registration. Therefore, no personal data is processed for this purpose.

Purchases

It is not possible to make purchases on the Site. Therefore, no data is processed for this purpose.
No reminder emails are sent.
No age-restricted products or services are offered.

Requests and Contact

Your data may be processed to respond to:

• information requests
• quote requests
• support requests

Providing data is optional, but necessary to receive a response.

Legal basis: legitimate interest of the Data Controller.

Marketing

No advertising material or newsletters are sent.

Google services (such as Google Ads and Google Analytics) may be used to personalize advertising and improve user experience. This may involve the use of cookies and personal data, subject to your consent.

For more details, please refer to the cookie policy.

Profiling

No profiling activities are carried out.

Data Transfer

The Data Controller does not transfer personal data to third parties.

Geolocation

No geolocation tools are used.

Curriculum Vitae

It is not possible to submit CVs through the Site.

Booking Services

No booking systems are active on the Site.

Photos and Videos

The Data Controller does not request the publication of photos or videos.

Web Scraping

The use of automated systems (such as bots, scrapers, or spiders) to access or extract data from the Site is strictly prohibited.

Unauthorized use may result in:

• suspension of access
• legal action

Communication of Personal Data

Personal data may be communicated (but not transferred) to:

• Public authorities, where required by law
• Legal, administrative, and tax entities
• Employees and collaborators
• IT service providers (hosting, maintenance, software management)

The Data Controller does not use:

• CRM platforms
• External customer care services
• Payment processors
• Couriers
• Generative AI providers

Data Retention

Personal data is retained only as long as necessary:

• General data: duration of the service
• Support requests: maximum 3 months after last contact
• Quote requests: maximum 6 months

Data may be retained longer if required by law.

Data Transfers Outside the EU

Personal data may be transferred to the USA based on adequacy decisions of the European Commission.

In other cases, transfers may occur without adequacy decisions. Users are invited to periodically review this section.

User Rights

You have the right to:

• access your personal data
• request rectification or deletion
• restrict or object to processing
• obtain data portability
• withdraw consent at any time
• lodge a complaint with the Italian Data Protection Authority

Requests can be made using the contact details provided above.

Changes to this Policy

The Data Controller may update this policy at any time.

Changes will be published on this page and, if significant, may also be communicated via email.