Agriturismo Bisenzio
Privacy Policy
This notice explains how personal data are processed when you visit the website, request information or availability, or interact with Agriturismo Bisenzio’s services.
Acknowledging this notice is required to submit a form; it is not consent to marketing.
1. Controller and contacts
The controller is FANELLI DANIELE – Agriturismo Bisenzio, P.IVA IT02435560566, Via Verentana 60, 01010 Capodimonte (VT), Italia, which determines the purposes and means of processing carried out through the website and contact channels. Privacy questions and rights requests can be sent to the contacts shown on this page.2. Scope
This notice covers agriturismobisenzio.it, contact, availability and event request forms, related email, telephone and WhatsApp communications, the digital menu and optional campaign measurement. External websites reached through a simple link apply their own notices.3. Data processed
- Technical data: IP address, date and time, requested URL, user-agent, security logs and session cookies.
- Contact data: name, email, telephone, preferred contact time and message.
- Request data: stay dates, adults and children, room or offer, event type/date and estimated guests.
- Campaign data: UTM parameters and click identifiers may pass through the requested URL and technical logs; storage in attribution systems and transmission to Google Ads occur only after advertising consent.
The website forms and contact channels are not intended to collect allergies or other health data. Do not communicate them in forms, by email or by telephone. You may ask general questions about ingredients and allergens without disclosing health information.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Operation, security and abuse prevention | Legitimate interest, Art. 6(1)(f) GDPR |
| Replying to information, availability and quote requests | Pre-contractual steps requested by you, Art. 6(1)(b) |
| Managing bookings, stays, restaurant and events | Contract performance, Art. 6(1)(b) |
| Administrative, tax and public-security duties | Legal obligation, Art. 6(1)(c) |
| Optional Analytics, Ads and external content | Consent, Art. 6(1)(a) |
| Establishing or defending legal claims | Legitimate interest, Art. 6(1)(f) |
No direct marketing is sent without separate optional consent. Cookie consent can be withdrawn through the footer link.
5. Required data and automated decisions
Required fields are needed to identify and manage your request; without them the form cannot be processed. Other fields are optional. The website does not make solely automated decisions producing legal or similarly significant effects. If authorised, Google Ads is configured for campaign measurement: user-data and ad-personalisation signals remain denied, and the website does not activate remarketing or personalised advertising.6. Recipients and providers
Data may be accessed, as necessary, by authorised controller staff; hosting, database, email, backup and security providers; advisers and authorities when required by law. VORREI GROUP S.R.L., VAT RO52017137, Piața Victoriei 5, Scara A, Etaj 6, Ap. 18, 300030 Timișoara, Romania, info@vorreigroup.com is the technical provider for the website and digital flows and technically receives copies of requests for support and routing; it does not determine Agriturismo Bisenzio’s commercial purposes. In the current routing, technical copies also pass through mailboxes on the alfasolution.it and vorreiordinare.it domains, managed within VORREI GROUP services. Google receives Analytics, Ads or Maps data only after the relevant choice. Contact lists are not sold.7. International transfers
VORREI GROUP S.R.L. is established in Romania, within the EEA. Google services may process data in the United States or other countries under safeguards declared by the provider, such as an applicable adequacy decision or Standard Contractual Clauses. Optional services remain blocked until consent. See Google’s transfer safeguards; information or a copy of the applicable safeguards may be requested from the Controller.8. Retention
- New website-form database records: each request receives a review date 24 months after collection; the contact record receives one 24 months after the last interaction. Expired records are removed in controlled batches during subsequent system operations and must be covered by periodic review, unless a contract, legal duty or claim requires longer.
- Email copies and previous records: must be periodically reviewed and erased or anonymised when no longer needed for the request, relationship, duty or claim.
- Operational booking data: for service and claim management; only accounting and tax documents are retained for the statutory period, normally up to 10 years.
- Technical and security logs: according to provider periods and as necessary for security, incidents or defence, without advertising reuse.
- Campaign and consent data: sessionStorage until session end; cookie choice for six calendar months.
Actual backup periods also depend on the hosting service and must be documented with the provider. A restoration may temporarily reintroduce erased data, which must then be removed again.
9. Your rights
You may request access, rectification, erasure, restriction, portability and objection where Articles 15-22 GDPR apply. Consent can be withdrawn at any time without affecting earlier lawful processing. The Controller may verify the requester’s identity and normally responds within one month.10. Complaint
You may lodge a complaint with the Italian Garante per la protezione dei dati personali or seek judicial protection. Contacting the Controller first is optional and does not condition your right to complain.11. Security, children and changes
Proportionate safeguards include HTTPS, restricted access, protected session cookies and anti-abuse controls. Forms must be used by adults or persons holding parental responsibility; children’s data are limited to the number needed for the request. Version and date are shown above and the notice is updated when services, purposes or providers change.To exercise your rights, write to: info@agriturismobisenzio.it.