Privacy Policy

1. Data controller

The data controller is Società Agricola Poggio dei Ciliegi s.s. di [nomi dei soci], Località Poggio dei Ciliegi 4, 53017 Radda in Chianti SI, VAT number [numero]. For any privacy request you can write to [email] or, by certified e-mail (PEC), to [PEC].

2. What data we collect

The details you enter in the booking request: name, e-mail address, phone number, dates, number of guests and anything you choose to write in your message.

Technical browsing data (IP address, browser and device type, date and time of access), needed for the website to work and stay secure.

3. Why we process it and on what legal basis

To answer your request and manage your booking: processing necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

To protect the website from abuse: our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for marketing and we never sell it.

When you stay with us, the law also requires us to register guests' identity documents with the Police (Alloggiati Web): this happens at check-in, not through this website.

4. How long we keep it

Booking requests are kept for as long as needed to handle them and in any case no longer than 24 months after the last contact, unless the law (for example tax rules) requires longer.

5. Who receives it

Your data may be processed by the provider of the platform that hosts this website and sends us the requests, appointed as data processor (Art. 28 GDPR). Servers are located in the European Union.

We do not transfer data outside the European Economic Area.

6. Cookies

This website only uses technical cookies needed for it to work. We use no profiling cookies or third-party analytics, so we do not ask for cookie consent.

The map opens only if you click «Open in Google Maps», on an external website with its own privacy policy.

7. Your rights

You can ask at any time for access to your data, rectification, erasure, restriction, portability, or object to processing (Arts. 15–22 GDPR) by writing to the contacts in section 1. We will reply within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).