Privacy Policy
Villa Monteporzano

On 25 May 2018, a new regulation came into force in the European Union, called the general regulation on data protection EU 2016/679 (“GDPR”).
It provides strict and specific guidelines on how personal data is collected and managed.
This also applies to companies and individuals who reside outside the EU but collect data from EU citizens.

Who we are
Corporate information:

Owner: AGRICULTURAL COMPANY VILLA MONTEPORZANO di GIULIO BALZANO
Registered office address: LOCALITÀ LA BADIA 17 – 05018 ORVIETO (TR)
Tax code / VAT number: 01588740553
Personal data processing manager: GIULIO BALZANO
Website address: https://www.villamonteporzano.com
Email address: INFO@VILLAMONTEPORZANO.COM
Telephone number: +39 389 4733326

What personal data do we collect?

When you use our services, you agree that our company collects some of your personal data.
We process two types of data, personal data provided by the user for the use of our services and technical data that we automatically collect to improve the service.

Data provided by the user
Contact form

With this application we collect the following data:

first name
email (mandatory data)
phone
You can also choose to provide us with the following information to formulate a cost estimate

check-in date
departure date
number of adults
number of children
age of children
number of accommodations
activities to do
message or notes
If you provide personal data of third parties, such as those of your family or friends, you must be sure that these subjects have been adequately informed and have consented
to its treatment in the manner described in this information.

We keep this data only in order to provide you with the requested service (information request).
We do not disclose this data to third parties.

Data collected automatically

data collected using cookies or similar technologies: for more information, please visit the “Cookies” section.
How do we use your data?

We use the collected data, if you have expressly given us your consent, to:

to guarantee you access to our services and improve their provision, in particular for:
[CHANGE OR CANCELLATION OF RESERVATION]
respond directly to your contact request by e-mail
We process the collected data, if you have expressly given us your consent, to analyze your habits or consumption choices in order to offer you an ever-increasing service
customized and in line with your interests.

Is the provision of data mandatory?

The provision of personal data is mandatory only for the processing necessary for the provision of the services offered (any refusal for the purpose of providing the service
makes it impossible to use the service itself); it is optional for promotional and profiling purposes and any refusal to give consent has no consequences
negative on the provision of the service offered within the website and related applications.

Who are the data subjects?

The data controller is AZIENDA AGRICOLA VILLA MONTEPORZANO di GIULIO BALZANO in the person of its pro-tempore legal representative, with registered office located in
LOCALITY LA BADIA 17 – 05018 ORVIETO (TR).

The person in charge of the protection of personal data (Data Protection Officer) pursuant to art. 37 of the GDPR is GIULIO BALZANO.

We remind you that you can contact the DPO at any time and send any question or request relating to your personal data and respect for your privacy by writing
at INFO@VILLAMONTEPORZANO.COM.

The data collected as part of the service provision may be disclosed to:

administrative and judicial bodies and authorities by virtue of legal obligations
Your personal data may be transferred outside the European Union to be processed by some of our service providers. In this case, we make sure this
transfer takes place in compliance with current legislation and that an adequate level of protection of personal data is guaranteed based on an adequacy decision,
on standard clauses defined by the European Commission or on Binding Corporate Rules.

Under no circumstances do we give or sell personal data to third parties.

The owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The treatment comes
carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
In addition to the owner, in some cases, other parties involved in the organization of this application may have access to the data (lawyers, system administrators, service providers
third party technicians, postal couriers, hosting providers, IT companies, communication agencies).
The updated list of managers can always be requested from the data controller.

What rights do you have on your data?

Users can exercise rights with reference to the data processed by the owner. In particular, the user has the right to:

Withdraw consent at any time. The user can revoke the consent to the processing of their personal data previously expressed.
Oppose the processing of your data. The user can object to the processing of their data when it occurs on a legal basis other than consent.
Further details on the right to object are indicated in the section below.
Access your data. The user has the right to obtain information on the data processed by the owner, on certain aspects of the processing and to receive a copy of the data processed.
verify and ask for rectification. The user can verify the correctness of their data and request its updating or correction.
Obtain the cancellation or removal of their personal data. When certain conditions are met, the user can request the deletion of their data by the owner.
Receive your data or have it transferred to another owner. The user has the right to receive their data in a structured format, commonly used and readable by an automatic device and,
where technically feasible, to obtain the transfer without obstacles to another holder.
This provision is applicable when the data is processed with automated tools and the processing is based on the user’s consent, on a contract of which the user is a party or
on contractual measures connected to it.
Make a complaint. The user can lodge a complaint with the competent personal data protection supervisory authority or take legal action.
Obtain the limitation of the treatment. When certain conditions are met, the user can request the limitation of the processing of their data.
In this case, the owner will not process the data for any other purpose than their conservation.
Disable, via the “my account” panel, the automatic sending via email reminder in case of abandoned cart
Delete your account via the “my account” panel
We have created this form to facilitate you in case you want to exercise the following rights on your personal data:

View your personal data
Correct your personal data (specify the fields to be changed in the notes)
Withdraw consent to the use of your personal data
Delete your personal data from your site / list
Portability of your data to others (specify in the notes)

How long and how do we keep your data?

The data are processed and stored for the time required by the purposes of the services used and for which they were collected.

Personal data collected for purposes related to the execution of a contract between the owner and the user will be retained for 2 years
Personal data collected for purposes related to the legitimate interest of the owner will be retained until this interest is satisfied.
The user can obtain further information regarding the legitimate interest pursued by the owner in the relevant sections of this document or by contacting the owner
to this email: [INFO@VILLAMONTEPORZANO.COM]
When the processing is based on the user’s consent, the owner can keep the personal data longer until such consent is revoked. Also the owner
may be obliged to keep personal data for a longer period in compliance with a legal obligation or by order of an author

ity.
At the end of the retention period, the personal data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to
data portability can no longer be exercised.

Changes to this privacy policy

The data controller reserves the right to make changes to this privacy policy at any time by informing users on this page and,
if possible, on this application as well as, if technically and legally feasible, by sending a notification to users through one of the contact details referred to
possession the holder.
Please therefore consult this page regularly, referring to the date of the last modification indicated at the bottom.
If the changes concern treatments whose legal basis is consent, the owner will collect the user’s consent again, if necessary.