Privacy Policy

Agriturismo Baccole is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website or use our services. It applies to all interactions with agriturismobaccole.com, including booking inquiries, newsletter sign-ups, and direct communications. We process your data in accordance with the General Data Protection Regulation (GDPR) and applicable Italian privacy laws.

Information We Collect

We collect only the information necessary to provide our services and improve your experience. This includes:

Booking and reservation data — Name, email address, phone number, arrival and departure dates, special requests, and payment details processed through secure third-party systems.
Contact form submissions — Information you voluntarily provide when sending inquiries via our website.
Cookies and usage data — IP address, browser type, pages visited, and time spent on our site. This helps us understand how you interact with our website and improve its functionality.
Third-party sources — We may receive personal data from booking platforms (e.g., Booking.com, Airbnb) when you make a reservation through them. We only process this data for the purpose of managing your stay.

How We Use Your Information

Your data is processed for the following lawful purposes:

Contract performance — To process reservations, manage payments, and provide the services you request.
Legitimate interest — To respond to inquiries, improve our website, and ensure the security of our systems.
Consent — For sending promotional communications (e.g., seasonal offers, local event updates). You can withdraw your consent at any time via the unsubscribe link in each email.

We never use your data for automated decision-making or profiling.

Data Sharing and Third Parties

We do not sell, trade, or rent your personal data. To operate our business, we share data with trusted third parties under strict contractual agreements:

Booking and payment processors (e.g., Stripe, PayPal) — to process reservations and payments securely.
Analytics providers (e.g., Google Analytics) — to understand website usage patterns. This data is anonymized where possible.
Email service providers — to send newsletters and booking confirmations only if you have opted in.

All third parties are required to maintain the confidentiality and security of your data.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Access — Request a copy of the data we hold about you.
Rectification — Correct inaccurate or incomplete data.
Erasure — Request deletion of your data where it is no longer necessary for the original purpose.
Restriction — Limit how we process your data in certain circumstances.
Portability — Receive your data in a structured, commonly used format.
Objection — Withdraw consent or object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Cookies

Our website uses cookies to enhance functionality and analyze traffic. We distinguish between:

Necessary cookies — Essential for the website to function (e.g., session management). These do not require consent.
Optional cookies — Used for analytics and personalization. You can manage your preferences through your browser settings or our cookie consent tool at your first visit.

You can disable cookies in your browser at any time, but this may affect the performance of certain features.

Data Retention and Security

We retain your personal data only as long as necessary for the purposes outlined in this policy. Specifically:

Booking data is retained for the duration of your stay and for up to 12 months afterward for administrative purposes.
Contact form inquiries are retained for 24 months.
Analytics data is anonymized after 14 months.

We implement appropriate technical and organizational security measures, including SSL encryption, password protection, and regular security reviews. While no system is completely impenetrable, we take all reasonable steps to protect your data from unauthorized access, alteration, or disclosure.

Contact Information

If you have any questions, concerns, or requests regarding your privacy, please contact us:

Agriturismo Baccole
Via di Baccole, 53037 San Gimignano (SI), Italy
Email: [email protected]

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it

Changes to This Policy

We review this privacy policy periodically to ensure it remains accurate and compliant. Any material changes will be communicated via a prominent notice on our website or, where appropriate, by email. We encourage you to review this page from time to time. The date of the last update is noted at the bottom of this page.

Last updated: March 2025