PRIVACY POLICY

SOCIETA’ AGRICOLA DIONORA (“Dionora, “we” or “us”) processes personal data about you when you (e.g.) contact us or book a stay with us.

The purpose of this Privacy Policy is to inform you of our processing of your personal data and your rights in that regard.

If you have any questions about the Privacy Policy or wish to exercise your individual rights described below, we are available via the following contact details:

 

SOCIETA’ AGRICOLA DIONORA
Via di Poggiano 9
53045 Montepulciano – Siena.

info@dionora.it

1. PURPOSE, TYPES OF PERSONAL DATA, AND LEGAL BASIS FOR PROCESSING

We process the following personal data as detailed below.

 

Purpose	Types of personal data	Legal basis
Contact and communication with you	·       Name ·       E-mail ·       Telephone number ·       The personal data that appears in your request	Our legitimate interest in ensuring adequate communication with you (GDPR, Article 6(1)(f))
Managing and administration of our collaboration with suppliers and business partners	·       Name ·       Company address ·       E-mail ·       Telephone number ·       Our ongoing correspondence in connection with the collaboration	Processing is necessary for compliance with a contractual obligation made by or agreed with you on behalf of one of our suppliers and business partners (GDPR, Article 6(1)(b)). Our legitimate interest in maintaining and ongoing dialogue with our business partners and ensuring proper registration for purposes of invoicing, bookkeeping and/or delivery (GDPR, Article 6(1)(f)).
Booking and staying with us	·       Name ·       E-mail ·       Telephone number ·       Information about your booking, including arrival and departure time, information about travelling companions ·       Additional personal data may also be processed during your stay if necessary.	Processing is necessary in order to enter into and fulfil the agreement for the stay (GDPR, Article 6(1)(b)).

2. WITH WHOM DO WE SHARE PERSONAL DATA?

We share your personal data with people, undertakings and authorities that need the data for fulfilment of the processing purposes listed above, or to whom we are required to disclose your data under applicable law.

In some cases, personal data will be disclosed to separate or joint controllers as well as data processors that perform various tasks on our behalf, for example suppliers of backup and cloud solutions or of other IT systems used by us.

3. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Some of the third parties to whom we transfer personal data may be located outside the EU/EEA.

To the extent that personal data are transferred to third countries, we ensure an adequate level of protection by using EU standard contractual clauses in the agreements with the data recipients, or by ensuring that the recipients are at least subject to special certification mechanisms or that they constitute “safe” third countries approved by the European Commission.

You can request a copy of the basis for the transfer by contacting us via the contact details above.

4. STORAGE PERIOD

We store personal data for as long as necessary to fulfil the purposes described above or as otherwise required by law.

5. RIGHTS

You may at any time request access to, rectification of and erasure of your personal data. In addition, you may under certain circumstances restrict the processing of your personal data, object to the processing and exercise your right to disclosure and transfer of your personal data to another data controller (right to data portability).

If you have consented to the processing of your personal data, you can withdraw the consent at any time by contacting us. However, such withdrawal will not affect any processing of personal data that has taken place prior to the withdrawal.

For additional information about your rights, see the Italian Data Protection Authority’s guide on your rights as a data subject, which is available on the Authority’s website (https://www.garanteprivacy.it/home).

COOKIES

COMPLAINTS

If you are not satisfied with the way we handle your rights, resolve any concerns or issues you have about how we process your personal data, you have the right to lodge a complaint with the Data Protection Authority in Italy:

Garante per la protezione dei dati personali
Piazza Venezia 11
IT-00187, Rome
Tel.: +39 06.696771
Protocollo@gpdp.it