1. Data Controller and Data Processors – Art. 13 para. 1 letters [a] [b] GDPR
The Data Controller is:
Filippo Legnaioli - Azienda Agricola L’Erta di Quintole
Tax Code: LGNFPP68A30D612B
VAT Number: 04697210484
Registered Office: Viadi Quintole per le Rose, 43. 50023 Impruneta (FI)
You may contact the Data Controller to exercise the rights recognized under the GDPR and to obtain an updated list of all appointed Data Processors.
The Legal Representative is Filippo Legnaioli.
The Data Controller can be contacted at:
Phone: +39 055-2011423
Email: info@ertadiquintole.it
Certified Email (PEC): f.legnaioli@cia.legalmail.it
The Data Controller has not appointed a Data Protection Officer (DPO).
2. Purpose of Data Processing – Art. 13 para. 1 letters [c] [d] GDPR 2016/679
The personal data provided (email address, phone number, and message text) are necessary to respond to your request. Data processing will take place only with the explicit consent of the data subject, provided at the time of filling out the apartment availability request form and the olive oil order form. No further processing based on the legitimate interests pursued by the Data Controller is foreseen.
3. Types of Data Processed
Common data (for example: email address and any information entered by the data subject in the message text); required fields are marked with (*).
4. Data Communication and Disclosure – Art. 13 para. 1 letters [e] [f] GDPR
The data is stored within our company’s email service and is not shared with third parties. Personal data is not subject to dissemination.
5. Profiling
Your personal data is not subject to any fully automated decision-making process, including profiling.
6. Data Processing Methods – Art. 13 para. 2 letter [a] GDPR
The processing of personal data consists solely of collecting information through the apartment availability request form and the olive oil order form on our website. No further processing of any kind is performed.
7. Data Retention
Your data will be stored on the office workstation computers for the sole period necessary to provide a response to the user. Once the response is given, the data will be permanently archived and retained only for the period required by legal regulations concerning email management.
8. Data Subject Rights – Art. 13 para. 2 letters [b] [c] [d] GDPR
The data subject has the right:
- to request from the Data Controller, using the contact details provided in section 1, access to their personal data and related information (see Art. 15 GDPR);
- to request the rectification of inaccurate data or the integration of incomplete data (see Art. 16 GDPR);
- to request the deletion (so-called "right to be forgotten") of personal data concerning them (when one of the conditions set out in Art. 17, paragraph 1, GDPR occurs, and subject to the exceptions provided in paragraph 3 of the same article);
- to request the restriction of processing of their personal data (when one of the situations indicated in Art. 18, paragraph 1, GDPR occurs);
- to request and obtain from the Data Controller – using the contact details in section 1 – their personal data in a structured, machine-readable format, in cases where the legal basis for processing is contract or consent and the processing is carried out by automated means, for the purpose of transferring such data to another data controller (so-called "right to data portability," see Art. 20 GDPR);
- to object at any time to the processing of their personal data in cases of specific personal circumstances (see Art. 21 GDPR);
- to withdraw consent to processing at any time, using the contact details in section 1, without affecting the lawfulness of processing based on consent before its withdrawal;
- if they believe that the processing of personal data carried out by the Data Controller violates GDPR provisions, to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), located at Piazza Venezia n. 11 – 00187 Rome (Italy) (Art. 77 GDPR) through the following means:
- registered letter addressed to the Italian Data Protection Authority at the address above;
- email to protocollo@gpdp.it or Certified Email (PEC) to protocollo@pec.gpdp.it (this address only accepts messages from certified email accounts);
- or by taking legal action before the appropriate judicial authorities (Art. 79 GDPR).
9. Provision of Data
Providing the personal data requested in the apartment availability request form and the olive oil order form is mandatory to receive a response to the request submitted through the form.
