Privacy Policy

VILLAPIERI.com – INFORMATION IN ACCORDANCE WITH ART. 13 GDPR

Data controller

Pursuant to EU Regulation 2016/679 (hereinafter GDPR for short), the data controller is:

Villa Pieri sas of Federica de Strobel di Campocigno & C.

Via Colombaia 24, 56043 Fauglia (PI)

c.f. 02534350505

Tel.3497627385

info@villapieri.com

(hereinafter, the “Company“)

The Company is committed to constantly protecting the privacy of its users (“User” or “Users“) in compliance with the GDPR and Legislative Decree No. 196 of June 30, 2003, as amended by Legislative Decree 101/2018 and ss. mm. (hereinafter, the “Privacy Code“).

Data protection officer

The company has appointed Federica de Strobel of Campocigno as its data protection officer for the data collected

privacy@villapieri.com

Personal data collected

The Company will process personal data of Users who use the services of the website www.villapieri.com (hereinafter, the “Site“).

The personal data processed by the Company through the Site are:

Contact identification data (first name, last name, email address, phone number, province) of the User collected through the form or ChatBot;

Cookies and Usage Data (i.e. information collected automatically by the Site – or by third party applications that this Site uses – including: the IP addresses or domain names of the computers used by the User who connects with this Site, the addresses in URI ( Uniform Resource Identifier) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit – for example, the length of time spent on each page – and the details of the itinerary followed within the Site, with particular reference to the sequence of pages consulted, the parameters relating to the User’s operating system and computer environment);

Some personal data requested as part of the use of the Site are considered as mandatory or necessary (e.g., identification data and email address in the case of communication with the Company through the form available on the Site) so that, in the absence of their provision, it may be impossible to use the services of the Site.

In cases where data are optional (e.g., message content and additional information in the form), failure by Users to provide them will have no effect on the availability of the service or its operation.

The possible use of cookies – or other tracking tools – by the Site or third-party service holders used by this Site is described in more detail

The User assumes responsibility for the personal data of third parties shared through this Site and warrants that he or she has the right to disclose or disseminate them, releasing the Owner from any liability to third parties. If the User is a family member or caregiver and discloses data of affected third parties, he/she agrees to pass on such disclosure to the affected third party.

Purpose and legal basis for processing

Personal data are collected directly from Users and are processed for the following purposes and under the legal bases specified below.

• Pre-contractual and contractual purposes:

• To handle Users’ requests and related reports in the pre-contractual and contractual stages that may follow.
• To ensure a timely response and meet the requests of the data subject by providing information on facilities, services, and to assess requests for individualized assistance.

The legal basis is the performance of a contract to which the data subject is a party or to the performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

Purposes of law

• To fulfill obligations under EU laws, rules and regulations.
• To respond to any requests from public authorities, law enforcement agencies, judicial authorities

The legal basis is the fulfillment of legal obligations to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR.

Purpose of service improvement:

• For the design and improvement of the services made available through the Site in order to make them efficient and adequate to the demands of Users.
• For the creation of leads and clusters for internal and/or marketing purposes of the Company or third parties where marketing consent is acquired from the data subject

The legal basis is the pursuit of the Owner’s legitimate interest in offering a service in line with the standards expected by Users, pursuant to Article 6(1)(f) of the GDPR.

Direct marketing purposes of the Company and third parties

• For direct marketing activities and sending newsletters of the Company towards Users who have already used the services provided through the Site, using the email addresses communicated by the data subject.
• To assess the degree of customer satisfaction with the services offered through the Site

The legal basis is Article 130(4) of the Privacy Code.

• For direct sales activities of the Company’s products and/or services, the Company’s marketing and advertising initiatives, opinion polls, etc. via telephone calls, text messages or other text messages, email, regular mail.

The legal basis is the express consent of the data subject, pursuant to Article 6(1)(a) of the GDPR and Article 130(1) and (2) of the Privacy Code.

Purpose of handling telephone inquiries:

• To provide answers to telephone inquiries from Users and relatives of Users.

The legal basis is the performance of a contract to which the data subject is a party or to the performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

Method of processing and storage period of collected data

The data will be processed for as long as the relationship with the person concerned is active, and after the notice of termination of the relationship, it will be retained in accordance with the regulations on the preservation of administrative records and in any case for a period not exceeding 10 years.

Recipients of data processing

Under the supervision of the Data Controller, categories of authorized individuals involved in the management of the Site (administrative, sales, marketing, legal, system administrators) or external data processors appointed where they act on behalf of the Company, Data Processors ex art. 28 GDPR, may have access to the data.

Within the scope of the purposes listed and, where necessary, in compliance with the consents provided, Users’ personal data may be disclosed to care facilities to fulfill the requests of data subjects, to providers of services requested by data subjects, to business partners for marketing purposes, to companies for customer satisfaction evaluation, etc.

The data may be communicated for the obligations imposed by the regulations or for proper execution of the contractual relationship for example to social security, welfare and insurance institutions, trade associations, tax and labor offices, professional firms for legal, commercial, tax assistance, auditing firms, banks and credit institutions.The data will not be disseminated.

Personal data will not normally be transferred beyond the European Economic Area (“EEA”). Where this happens in the context of the provision of services for the Site by third parties, if the transfer is to states that do not benefit from an adequacy decision by the European Commission, the Company will adopt one of the safeguards for this purpose provided by the GDPR, for example, by signing the standard contractual clauses adopted by the European Commission, taking care to keep them up to date, and we will implement any additional technical, organizational and/or contractual measures appropriate to ensure a level of protection of your personal data that is adequate and, in any case, essentially equivalent to that guaranteed within the EEA.

Nature of conferment

Any refusal to provide the data obligatory or the wrong communication of the same leads to the objective impossibility for the writer to manage pre-contractual and contractual relations or fulfill legal obligations.

When disclosure of data is optional, the user has no obligation to disclose.

Rights of data subjects

The data subject (whether the User who contacts the Company or the party in whose interest the Company is contacted) may exercise his/her rights under Articles 15-21 GDPR, namely:

(a) Right of access

The data subject shall have the right to obtain confirmation as to whether or not personal data relating to him or her are being processed and, if so, to obtain access to the personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations; (iv) when possible, the period for which the personal data are to be retained or, if this is not possible, the criteria used to determine this period.

(b) Right of rectification and erasure

The data subject is granted the right to obtain the rectification of inaccurate personal data as well as, taking into account the purposes of the processing, the right to obtain the integration of incomplete personal data, including by providing a supplementary statement.

He or she also has the right to obtain the deletion of personal data concerning him or her if any of the following reasons exist: (i) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (ii) the data is being processed unlawfully; (iii) he or she has withdrawn the consent under which the Data Controller had the right to process his or her data and there is no other legal basis for the Data Controller to process the data; (iv) he or she has objected to the processing activity and there is no overriding legitimate reason; (v) the personal data must be erased to fulfill a legal obligation.

However, the Company has the right to disregard the exercise of the above cancellation rights if the right to freedom of expression and information prevails or for the exercise of a legal obligation or to defend its own right in court.

(c) Right to data portability

The data subject also has the right to receive certain personal data related to the management of the contractual relationship with the data subject in a structured, commonly used and readable format his or her personal data provided to and processed by the Company pursuant to consent, as well as the right to transmit such data to another Data Controller without hindrance.

(d) Right to restriction of processing

The data subject has the right to obtain the restriction of processing when one of the following cases occurs: (i) for the period necessary for the Controller to verify the accuracy of such personal data concerning him/her whose accuracy he/she has contested; (ii) in case of unlawful processing of his/her personal data; (iii) even if your personal data is not necessary for the purposes of the processing, in any case it needs to be processed for the establishment, exercise or defense of a right in court; (iv) for the period necessary for the verification as to whether the legitimate reasons of the Controller prevail over your request to object to the processing.

(e) Right to object to processing

Finally, the data subject has the right to object, at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data for purposes of legitimate interest, including profiling and lead generation on the basis of such provisions, subject to the existence of legitimate reasons on the part of the Company which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.

The data subject always has the opportunity to object to the processing of his or her personal data for direct marketing purposes.

Ways of exercising rights

In exercising their rights, the data subject may contact the Controller by sending a written communication to the company’s registered office or by contacting the DPO, or by sending an e-mail to info@villapieri.com

The data subject always has the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), pursuant to Art. 77 of the Regulation, if he or she believes that the processing of his or her data is contrary to the legislation in force.

Changes

This privacy policy is effective as of March 1, 2025

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking the date of last modification shown at the bottom as a reference. In case of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Site and may request the Owner to remove his/her personal data. Unless otherwise specified, the previous privacy policy will continue to apply to personal data collected up to that point.