PRIVACY POLICY

(Articles 13–14 Regulation (EU) 2016/679 – GDPR)

1. DATA CONTROLLER

Azienda Agricola Venturi Federico
Via Legnago, 218
37134 Verona (VR) – Italy
Email: info@legrazieagriturismo.it


2. PERSONAL DATA PROCESSED

The website collects only the personal data necessary to:

  • respond to availability requests submitted through the contact form.

The data collected are:

  • First name

  • Last name

  • Email address

  • Phone number

  • Number of children (if provided)

The form also includes:

  • mandatory checkbox for acceptance of this Privacy Policy

  • optional checkbox for receiving informational and promotional communications (newsletter)


3. PURPOSES AND LEGAL BASIS OF PROCESSING

3.1 Mandatory purposes (no consent required)

Responding to availability and contact requests.

Data submitted through the form are used exclusively to respond to your request.

Legal basis:
Art. 6(1)(b) GDPR (performance of pre-contractual measures at the request of the data subject).

Failure to provide mandatory data prevents submission of the request.


3.2 Optional purposes (consent required)

Sending informational material, offers and updates from Azienda Agricola Venturi Federico via periodic email communications.

Processing occurs only if the user selects the marketing consent checkbox.

Legal basis:
Art. 6(1)(a) GDPR (consent of the data subject).

Refusal to provide consent does not affect website use or submission of availability requests.


4. METHODS OF PROCESSING

Processing is carried out using electronic and IT tools, in compliance with the principles of:

  • lawfulness, fairness and transparency

  • integrity and confidentiality

  • data minimization

Appropriate technical and organizational measures are implemented pursuant to Art. 32 GDPR to prevent data loss, unauthorized access or improper use.


5. DATA RETENTION

  • Availability request data: retained for 1 year, necessary to manage communications and bookings.

  • Marketing data: retained until withdrawal of consent via the unsubscribe link in each email and in any case no longer than 5 years from the last meaningful interaction.

In case of withdrawal, data may be retained only where required by law or for the protection of the Controller’s rights.


6. NEWSLETTER AND UNSUBSCRIPTION SYSTEM

Newsletter subscription does not require double opt-in.

Each email contains an unsubscribe button allowing users to withdraw consent at any time.


7. DATA SHARING

Personal data may be shared with:

  • employees and collaborators of the Controller

  • external service providers (e.g., software managers, hosting providers, consultants), appointed as Data Processors

  • public authorities where required by law

Data are not publicly disclosed.


8. TRANSFER OF DATA OUTSIDE THE EU

If data are processed by providers located outside the EU, the Controller ensures that transfers comply with Articles 45–46 GDPR (adequacy decisions, standard contractual clauses or equivalent safeguards).


9. DATA SUBJECT RIGHTS

The data subject may exercise the following rights at any time:

  • access (Art. 15)

  • rectification (Art. 16)

  • erasure (Art. 17)

  • restriction (Art. 18)

  • objection (Art. 21)

  • data portability (Art. 20)

  • withdrawal of consent (Art. 7)

  • lodge a complaint with a supervisory authority (Art. 77)


10. HOW TO EXERCISE YOUR RIGHTS

Requests may be sent to:

info@legrazieagriturismo.it


11. EXTERNAL DATA PROCESSORS

An updated list of external Data Processors is available at the Controller’s premises.


12. POLICY UPDATES

This Privacy Policy is updated as of 28/02/2026.
Any changes will be published on this page.