Privacy Policy-EN

PRIVACY NOTICE · GDPR 2016/679

Privacy Policy

1. DATA CONTROLLER

Azienda Agraria di David Melani Società Semplice Agricola
Via Vecchia Fiorentina 145/B – 51100 Pistoia (PT) – Italy
VAT: IT01155040478
Email: info@lamaggiatica.it
Phone: +39 338 867 3404

2. DATA COLLECTED

Data provided voluntarily:

  • Full name
  • Email address
  • Phone number
  • Requested stay dates
  • Number of guests and related information
  • Special requests

Automatically collected data:

  • Navigation data (IP address, browser type, pages visited, access times)
  • Technical cookies necessary for the website to function

3. PURPOSES AND LEGAL BASIS

PURPOSE LEGAL BASIS
Responding to booking and contact requests Art. 6.1.b GDPR
Managing the hospitality contract Art. 6.1.b GDPR
Legal obligations (guest registration with authorities) Art. 6.1.c GDPR
Anonymous statistical analysis of website traffic Art. 6.1.f GDPR

4. COOKIES

Technical cookies (necessary — no consent required):

  • WordPress session cookies
  • Language preference cookies (Polylang)

Analytics cookies (consent required):

  • Google Analytics 4 — anonymous traffic analysis

Third-party cookies (consent required):

  • Google Fonts — loading of web fonts

You can manage your cookie preferences via the banner on this website or by adjusting your browser settings.

5. DATA RECIPIENTS

  • Technical service providers (hosting: Netsons Srl)
  • Google LLC (Analytics, Fonts) — US transfer based on EU Standard Contractual Clauses
  • Public security authorities (mandatory guest registration)

Data is never sold or shared with third parties for marketing purposes.

6. INTERNATIONAL DATA TRANSFERS

Some services (Google Analytics, Google Fonts) involve the transfer of data to the United States. Such transfers are made on the basis of the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

7. RETENTION PERIODS

DATA TYPE RETENTION
Unconfirmed booking requests 12 months
Completed stay data 10 years (tax obligations)
Guest registration records As required by law
Navigation data and logs 12 months

8. YOUR RIGHTS

Under Articles 15–22 GDPR you have the right to:

  • Access — obtain confirmation of processing and a copy of your data
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Restriction — limit processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest

To exercise your rights: info@lamaggiatica.it

You also have the right to lodge a complaint with the Italian Data Protection Authority — www.garanteprivacy.it

9. CHANGES TO THIS POLICY

The Data Controller reserves the right to modify this privacy policy. Any changes will be published on this page with an updated date.

Last updated: June 2026