Privacy Policy

Privacy policy and processing of personal data

The following information refers to this application/website and is addressed to visitors and users of the services offered by it, starting from the address (https://www.agriturismocinuzza.it), with the exclusion of external links.Information pursuant to Art. 13 of Legislative Decree no. 196/2003 and adapted to the new Art. 13 and 14 of the GDPR – EU Regulation 2016/679.This website/application collects certain Personal Data of its Users. Users may be subject to different levels of protection. Some Users therefore enjoy superior protection. Further information regarding the protection criteria can be found in the section on applicability.

Data Controller

Agriturismo CinuzzaVia della Pietraia, 18 53019 Castelnuovo Berardenga Siena – ToscanaEmail: info@agriturismocinuzza.it

Types of data collected

The data collected through this site are divided into:

Navigation data

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, and other parameters connected with the http protocol and relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data is managed by Google Analytics and is always collected in a completely anonymous form.

Data provided voluntarily by the user. (Contact form)

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data included in the message. This data will be sent to our mailbox info@agriturismocinuzza.it (managed by the owner) hosted on mail servers owned by hostinger.com. Your data and your e-mail address will not be passed on to anyone and will never be included by us in any electronic marketing system or mailing list (e-mails sent to your address for advertising purposes).Personal data collected: surname, first name, email.

Mailing list and news letter systems (this application)

By voluntarily registering for the mailing list or newsletter, the User’s name and email address is automatically added to a contact list to which email messages containing information, including of a commercial and promotional nature, relating to this Application may be sent. The User’s email address may also be added to this list as a result of registering with this Application or after making a purchase.Personal Data collected: surname, first name, email.

Payment Management

Payment processing services allow this Application to process payments by credit card, bank transfer or other means. The data used for payment are acquired directly by the operator of the payment service requested without being processed in any way by this Application. Some of these services may also allow for the scheduled sending of messages to the User, such as emails containing invoices or payment notifications.

File Log

Like many other websites, this one also makes use of log files, i.e. it records the history of operations as they are performed. The information contained within the log files includes IP addresses, browser type, Internet Service Provider (ISP), date, time, entry and exit page and number of clicks. All of this is used to analyse trends, improve our services by analysing demographic data, administer the site, identify abnormal behaviour and protect us from attacks by hawkers, spammers and crackers. This data cannot be traced in any way to the identity of the user and are technical cookies. The log files are stored by the system that provides the hosting service to our application. The server physically resides in the Hostinger International Ltd. web farm.

Cookies

Cookies are pieces of information that sites record on the memory of the computer, smartphone or tablet you use to browse: they can serve various purposes, including saving your preferences, allowing you to purchase products from an e-commerce site, and recognising you when you return to the site. There are two main types of cookies in this application:(a) Our own cookiesb) Third party cookiesOn our pages you will find share buttons on the social networks Facebook, Twitter, LinkedIn and GooglePlus, iframes containing maps from Google Maps, or embedded content from YouTube, Instagram; all of these platforms store data in the cloud on servers that may reside outside the EU and use their own cookies to recognise you if you are browsing after logging into your accounts; we have no agreements with any of them and are unable to control how they use your data. For more information, please navigate to the relevant privacy policies in the table belowBelow is a detailed description of the types in the Cookies policy box

Method and place of processing of collected Data

Treatment modes

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/or telematic instruments, with organisational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organisation of this Application (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller, may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller.

Legal basis for processing

The Controller processes Personal Data relating to the User if one of the following conditions is met

the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Controller may be authorised to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (‘opts-out’) to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data;

processing is necessary for the performance of a contract with the User and/or the performance of pre-contractual measures;

processing is necessary for the performance of a legal obligation to which the Controller is subject;

processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Controller;

processing is necessary for the pursuit of the legitimate interest of the Controller or of third parties.

However, it is always possible to ask the Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, provided for by a contract or necessary to conclude a contract.

Place

The Data are processed at the Controller’s premises and at any other place where the parties involved in the processing are located. For further information, please contact the Data Controller. The User’s Personal Data may be transferred to a country other than the one where the User is located. For further information on the location of the processing, the User may refer to the section on Personal Data processing details. In case of higher protection, the User is entitled to obtain information about the legal basis for the transfer of Data outside the European Union or to an international organisation under public international law or consisting of two or more countries, such as the UN, as well as about the security measures taken by the Controller to protect the Data. Should one of the transfers just described take place, the User may refer to the respective sections of this document or request information from the Data Controller by contacting it at the contact details given at the beginning.

Storage period

Data are processed and stored for the time required by the purposes for which they were collected.Therefore:

- Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the performance of such contract is completed.
- Personal Data collected for purposes related to the legitimate interest of the Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.

When processing is based on the User’s consent, the Controller may keep the Personal Data for a longer period until such consent is revoked. Moreover, the Controller may be obliged to keep the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.At the end of the retention period the Personal Data will be deleted. Therefore, at the expiry of this period, the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Purposes of Data Processing

The User’s Data are collected to allow the Data Controller to provide its Services, as well as for the following purposes: Access to accounts on third party services, Statistics, Registration and authentication, Display of content from external platforms and Interaction with social networks and external platforms. To obtain further detailed information on the purposes of processing and on the Personal Data concretely relevant for each purpose, the User may refer to the relevant sections of this document.

Facebook permissions required by this application

This Application may require certain Facebook permissions allowing it to perform actions with the User’s Facebook account and collect information, including Personal Data, from it. This service allows this Application to connect with the User’s account on the social network Facebook, provided by Facebook Inc.For more information about the following permissions, please refer to the Facebook permissions documentation and Facebook’s privacy policy.Required permissions are as follows:Basic informationThe basic information of the User registered on Facebook, which normally includes the following Data: id, name, picture, gender and language and, in some cases, Facebook ‘Friends’. If the User has made further Data publicly available, this will be available.EmailProvides access to the User’s primary email address.Contact emailAllows access to the user’s contact e-mail address.

Cookie policy details

Cookies policy

Manager	Description
Cookies of agriturismocinuzza.it	On this site, technical cookies are used in order to: remind you if you have been informed of the existence of cookies, or if I have to remind you that we use them, and to invite you to read this policy. No personal user data is acquired by the site in this respect. We do not use cookies for the transmission of information of a personal nature, nor do we use so-called persistent cookies of any kind, i.e. systems for tracing users; on some pages technical cookies may be created for the simple correct functioning of the page itself. (We would like to remind you that the user, by configuring his or her browser, can at any time disable the operation of cookies or be informed when he or she receives a cookie and refuse to consent to its being sent). With the exception of automatically collected data (browsing data), the provision of other information through pre-arranged forms or emails is free and spontaneous and failure to send it may only result in any requests not being fulfilled. The place of storage of system logs is the website server that acts as hosting and the company computers for emails, except for cookies that are stored on your computers.
Third-party cookies on the site	This application has access to third-party servers or ad networks that use such technology to send ads to your browser through agriturismocinuzza.it. By detecting your IP address they show the advertisements most relevant to your interests. Similar technologies (such as cookies, web bacons and javascript) may be used by third-party ad networks to measure the effectiveness of their advertising messages and to customise the content of those messages. The agriturismocinuzza.it website and its administrator do not have any control over the cookies that are used by these third parties, so to learn more you should consult the privacy policies of these third parties as well as the options for disabling the collection of this information. The administrator of this site cannot control the activities of the advertisers on the agriturismocinuzza.it blog. You can however disable cookies directly from your browser. The agriturismocinuzza.it site does not use its own profiling cookies but those present are exclusively controlled by third parties such as Google or Facebook. 1) DoubleClick DART cookie: this cookie was introduced by Google a few years ago and is used to publish Adsense ads on agriturismocinuzza.it in order to show the user more targeted advertising based on their history. Users can accept this cookie or disable it in their browser by visiting the Privacy and Terms page. More information about the types and how Google uses cookies for advertising purposes can be found on the Types of cookies used webpage. Some Google Adsense advertising partners may also use cookies and Web Beacons to track users. 2) Facebook cookies: This site has some Facebook plugins that can track the behaviour of readers. More information can be found on the page for the Facebook Privacy Policy. 3) Google+ through the plusone.js script may process personal data according to these guidelines Google Cookie Privacy Policy 4) Pinterest will process personal data according to these guidelines. Pinterest Cookie Policy Privacy 5) Trip Advisor processes personal data, within any iframes, gadgets and windgets, according to these guidelines Trip Advisor Cookie Policy Privacy 6) whatshelp may store your data within its own iframe which allows the contact buttons below to connect you to ours: email, whatsapp, facebook messenger. Whatshelp Privacy Policy 7) Instagram Components belonging to this social may generate cookies to monitor interests and trends, more info in their Instagram Privacy Policy 8) Commercial Affiliation: This type of service allows this Application to display ads for products or services offered by third parties. The ads may be displayed either in the form of advertising links or in the form of banners in various graphic forms. Clicks on the icon or banner displayed on this Application are tracked by the third-party services listed below and are shared with this Application. To find out what data is collected, please refer to the privacy policies of each service. -Amazon Affiliation (Amazon) Amazon Affiliation is an affiliate marketing service provided by Amazon.com Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy. -Google AdSense (Google) Google AdSense is an advertising service provided by Google Inc. This service uses the ‘Doubleclick’ cookie, which tracks the use of this Application and the User’s behaviour in relation to the advertisements, products and services offered. The User can decide at any time not to use the Doubleclick Cookie by deactivating it: google.com/settings/ads/onweb/optout. Personal Data Collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy
Site Navigation – Google Analytics	As mentioned, analytics cookies are considered technical if they are only used for optimisation purposes and if the users’ IPs are kept anonymous. We inform the user that this site uses the free Google Analytics service. We would like to remind you that the data is only used to obtain data of the most visited pages, number of visitors, aggregated data of visits per operating system, per browser, etc. Google Analytics IPs have been anonymised. These parameters are stored on Google’s servers, which regulates privacy according to these guidelines.A user can deactivate Google Analytics while browsing by using the add-on available for Chrome, Firefox, Internet Explorer, Opera and Safari. The place of data storage is the Google Analytics server and Google Adsense for browsing data only.

You can also

- delete cookies individually for each domain,

- hide research.

- set Google’s ad settings.

User Rights

Users may exercise certain rights with regard to the Data processed by the Data Controller.In the case of superior protection, the User may exercise all the rights set out below. In any other case, the User may contact the Controller to find out which rights apply in his/her case and how to exercise them.In particular, the User has the right to:

- withdraw consent at any time. The User may revoke the consent to the processing of his or her Personal Data previously given.
- oppose the processing of their Data. The User may object to the processing of its Data when it is done on a legal basis other than consent. Further details on the right to object are set out in the section below.
- access to their Data. The User has the right to obtain information on the Data processed by the Controller, on certain aspects of the processing and to receive a copy of the Data processed.
- verify and request rectification. The User may verify the correctness of its Data and request that it be updated or corrected.
- obtain the restriction of the processing. When certain conditions are met, the User may request the restriction of the processing of its Data. In this case, the Data Controller will not process the Data for any purpose other than its preservation.
- obtain the deletion or removal of their Personal Data. When certain conditions are met, the User may request the deletion of its Data by the Data Controller.
- receive their Data or have them transferred to another Data Controller. The User has the right to receive its Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another data controller. This provision is applicable when the Data are processed by automated means and the processing is based on the User’s consent, on a contract to which the User is party or on contractual measures related thereto.
- Proposing a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of public authority vested in the Controller or in pursuit of a legitimate interest of the Controller, Users have the right to object to the processing for reasons related to their particular situation. Users are reminded that if their Data are processed for direct marketing purposes, they may object to the processing without giving any reason. To find out whether the Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise rights

In order to exercise their rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are filed free of charge and processed by the Controller as quickly as possible, in any case within one month.

Applicability of the higher level of protection

While most of the provisions of this document apply to all Users, some are expressly subject to the applicability of a higher level of protection to the processing of Personal Data.This higher level of protection is always guaranteed when the processing

is carried out by a Data Controller established in the EU; or

involves Personal Data of Users located in the EU and is functional to the offering of goods or services against payment or free of charge to such Users; or

concerns Personal Data of Users located in the EU and allows the Controller to monitor the behaviour of such Users to the extent that such behaviour takes place within the EU.

Further information on treatment

Defence in courtThe User’s Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages to its possible establishment for the defence against abuses in the use of this Application or related Services by the User. The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.Specific informationUpon the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.Information not contained in this policyFurther information in connection with the processing of Personal Data may be requested at any time from the Data Controller using the contact details.Responding to ‘Do Not Track’ requestsThis Application does not support ‘Do Not Track’ requests. To find out whether any third-party services used support them, the User is invited to consult their respective privacy policies.Changes to this privacy policyThe Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Application as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details held by the Data Controller . Therefore, please consult this page regularly, referring to the date of last modification indicated at the bottom.If the changes affect processing whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.

Legal references

This Privacy Policy is drafted on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy policy relates exclusively to this Application.

Information and tips on protecting against unwanted cookies

Anonymous navigation

Browsing without the use of technical and profiling cookies is possible by means of what is known as incognito browsing and is feasible with all major browsers.

- More information on disabling cookies on Firefox, in English.
- More information about disabling cookies on Chrome, in English
- More information about disabling cookies on Internet Explorer, in English
- More information about disabling cookies on Safari , in English
- More information about disabling cookies on Opera, in English.

In your browser you can set your privacy preferences so that cookies are not stored, delete them after each visit or each time you close the browser, or even accept only casarossi.info cookies and not those of third parties; there is also a service, Your Online Choices, which shows you which cookies the various services install and how you can deactivate them, one by one.Last modified: 13/01/2025