INFORMATION ON THE PROCESSING OF PERSONAL DATA (ART. 13 GDPR)

1. DATA CONTROLLER

The Data Controller is Podere dell'Arco ssa, with registered office in Viterbo (VT) VAT number 02454010568

2. TYPES OF DATA COLLECTED The personal data collected through this website, independently or through third parties, include: identification and contact data (name, surname, email address, telephone number) voluntarily provided by the user through the contact forms, as well as navigation data (e.g., IP addresses) collected automatically through cookies.

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

The data is processed for the following purposes:

Processing requests and services: To respond to requests for information, quotes, or reservations submitted by the user. Legal basis: execution of pre-contractual or contractual measures.
Legal compliance: For administrative, accounting, and tax purposes. Legal basis: legal obligation to which the Data Controller is subject.
Marketing and commercial communications: Only with the user's explicit consent, for sending newsletters or communications relating to our initiatives. Legal basis: the data subject's consent.

Providing data for contractual and legal purposes is mandatory; failure to provide it will make it impossible to provide the requested services. Providing it for marketing purposes is optional.

4. METHODS AND PLACE OF PROCESSING. Processing is carried out using computerized, electronic, and paper-based tools, using methods strictly related to the indicated purposes and methods that guarantee data security and confidentiality. The data is processed primarily at the Data Controller's headquarters, and no data transfers to non-EU countries are envisaged.

5. DATA RETENTION PERIOD

The data will be retained for the time strictly necessary to achieve the purposes for which they were collected:

Data related to tax and civil obligations are retained for 10 years as required by law.
Contact details for information requests will be retained for a maximum of 24 months from the last contact.
Data processed for marketing purposes will be retained until the user withdraws their consent.

6. DATA COMMUNICATION The data will not be disclosed, but may be shared with authorized internal employees or collaborators, as well as with external parties appointed, if necessary, as Data Processors (e.g., tax consultants, technology service providers or web hosting providers). The updated list is available at the Data Controller's headquarters.

7. RIGHTS OF THE INTERESTED PARTY In accordance with Articles 15-22 of the GDPR, the user has the right at any time to: obtain confirmation of the existence of their data, know its content and origin, verify its accuracy, request its integration, updating, rectification, deletion (right to be forgotten), restriction of processing, or object to its use for legitimate reasons or for marketing purposes. Requests should be sent to the Data Controller by email at info@poderedellarco.com. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority.