Privacy policy

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA
Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR)

Dear Guest/User,

Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), Agriturismo Val wishes to inform you about the methods and purposes of the processing of your personal data.

1. Data Controller
The Data Controller for personal data processing is:

Entity Name: Agriturismo Val

Location: Costermano sul Garda (VR), Italy

Contact Email: [Insert Agriturismo Val email]

2. Types of Data Processed
Agriturismo Val collects and processes the following categories of personal data:

Identification and Contact Data: first name, last name, residential address, tax ID/VAT number, date and place of birth, nationality, email address, telephone number.

Payment and Guarantee Data: credit card details (for pre-authorizations or deposits), bank details for transfers.

Stay-Related Data: arrival and departure dates, special preferences or allergies voluntarily disclosed by the guest, details regarding family members or accompanying guests.

Public Security Data Required by Law: identity document details and document type (requested upon check-in).

3. Purposes of Processing and Legal Bases
Your personal data are processed for the following purposes:

Booking Management and Contract Execution:

Purpose: Receiving bookings, sending confirmations, providing accommodation and dining services, managing payments, and handling the credit card pre-authorization system.

Legal Basis: Performance of a contract to which the data subject is party or taking pre-contractual steps (Art. 6, par. 1, lit. b GDPR).

Compliance with Legal Obligations and Public Security:

Purpose: Registration of guests with the Public Security Authority ("Schedine Alloggiati" pursuant to Art. 109 TULPS), accounting and tax compliance, collection of the Municipal Tourist Tax of the Municipality of Costermano sul Garda.

Legal Basis: Compliance with a legal obligation to which the Controller is subject (Art. 6, par. 1, lit. c GDPR).

Management of Disputes and Defense of Rights:

Purpose: Defending the rights of the Controller in or out of court (e.g., debt collection, charging penalties or damages).

Legal Basis: Legitimate interest of the Data Controller (Art. 6, par. 1, lit. f GDPR).

Information and Promotional Use of Email (Customer Retention):

Purpose: By making a reservation, the email address provided by the customer may be used in the future by Agriturismo Val to send updates, special offers, newsletters, and promotional communications regarding similar services.

Privacy Guarantee: Agriturismo Val guarantees that your email address will not be sold, shared, or transferred to third parties under any circumstances.

Legal Basis: Legitimate interest of the Data Controller regarding the promotion of its own similar services (Art. 6, par. 1, lit. f GDPR). Users can object to receiving such communications at any time, easily and free of charge (via the unsubscribe link at the bottom of every promotional email or by contacting the property).

4. Processing Methods and Data Retention
Data processing is carried out using both manual/paper instruments and electronic/IT tools, with logic strictly related to the aforementioned purposes, ensuring appropriate security and confidentiality.

Retention Periods:

Contractual, Accounting, and Tax Data: retained for 10 years as required by statutory law (Art. 2220 Italian Civil Code).

Public Security Data (TULPS): guest registration forms are deleted immediately after transmission to the State Police portal (Alloggiati Web).

Credit Card Guarantee/Pre-authorization Data: released/deleted immediately after check-out and final payment settlement.

Email Data for Promotional Purposes: retained until the user exercises their right to object (opt-out) or requests deletion.

5. Recipients and Disclosure of Data
Your personal data will not be disseminated publicly, but may be communicated solely to:

Public Authorities and Entities: Police Headquarters (Alloggiati Web portal), Municipality of Costermano sul Garda (for Tourist Tax), Tax Authorities.

Consultants and Professionals: accountants, legal advisors, banking institutions, and payment networks.

Technology Service Providers: booking management software (PMS/Channel Manager), web hosting providers, and email distribution platforms (acting as Data Processors pursuant to Art. 28 GDPR).

N.B.: No personal data or email addresses collected will ever be sold or transferred to third parties for independent commercial purposes.

6. Provision of Data
Mandatory: The provision of identification, documentation, and payment data for contractual and statutory requirements is mandatory. Refusal to provide this data will make it impossible to accept your reservation and host you at Agriturismo Val.

Right to Object: The use of email for sending future promotional communications is connected to the booking made, but guests retain the full and continuous right to object to such mailings at any time, without any impact on their stay.

7. Rights of the Data Subject (Artt. 15–22 GDPR)
You have the right to exercise the following rights towards the Data Controller at any time:

Access: Request confirmation as to whether or not personal data concerning you is being processed.

Rectification: Request the correction of inaccurate data or the integration of incomplete data.

Erasure ("Right to be Forgotten"): Request the erasure of personal data when it is no longer necessary or when the legal basis ceases to exist.

Objection to Promotional Email Use: Object at any time to the sending of newsletters or commercial communications.

Restriction and Portability: Request the restriction of processing or data portability in a structured, commonly used format.

To exercise these rights, please send a written request to: [Agriturismo Val Email].

If you believe that the processing of your data violates GDPR rules, you have the right to lodge a complaint with your local Data Protection Authority (in Italy: Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).