Privacy notice
Privacy Policy
1. Data controller
The data controller is Az. Agrituristica Villa Colonnetta di Paolo Ancillai, Via Ternana km 10, 02034 Montopoli di Sabina (RI) — VAT 00921160578.
Contact email: wedding@villacolonnetta.it · Tel. +39 373 348 2435.
2. What data we collect
We process only the data you provide to us voluntarily and the technical data needed for the site to function:
- Contact/quote-request form data: first and last name, telephone, email, approximate date of the event, number of guests and any message.
- Browsing data: technical data collected automatically (e.g. IP address, browser type) and cookies, as described in the Cookie Policy.
3. Purposes and legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to requests for information and quotes | Response to your request / pre-contractual measures (Art. 6.1.b) and legitimate interest in responding (Art. 6.1.f) |
| Managing the relationship in the event of a booking | Performance of the contract (Art. 6.1.b) |
| Security and proper functioning of the site | Legitimate interest (Art. 6.1.f) |
| Non-essential cookies (e.g. third-party map) | Consent (Art. 6.1.a) |
Providing the form data is optional, but necessary for us to contact you back: without it we will not be able to follow up on your request.
4. How we process the data
The data is processed using IT tools and security measures appropriate to prevent unauthorised access, loss or disclosure. Communications take place over an encrypted connection (HTTPS).
5. Recipients and external processors
The data may be processed, as data processors, by suppliers who support us in delivering the service: hosting providers, the form/email management service and any CRM. These parties operate on the basis of specific agreements (DPA). The data is neither disseminated nor sold to third parties.
6. Transfers outside the EU
Should any suppliers be located outside the European Economic Area, the transfer takes place in compliance with the GDPR, on the basis of adequacy decisions or the European Commission's Standard Contractual Clauses (SCC).
7. Retention period
The data from your requests is retained for as long as necessary to handle your request and, in the event that no booking is made, for a maximum of 24 months, unless otherwise required by law. Data relating to booked events is retained for the duration of the relationship and for the periods required by law (tax/accounting).
8. Your rights
As a data subject you may exercise at any time the rights set out in Articles 15-22 of the GDPR: access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent (without affecting the lawfulness of processing based on consent given before its withdrawal).
To exercise them, write to wedding@villacolonnetta.it: we will reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
9. Changes
This privacy notice may be updated: any changes will be published on this page with the new update date.
Document provided as a template compliant with the principles of the GDPR. A final review by the data controller or a legal advisor is recommended before final publication.