Privacy policy about the processing of personal data set and provided by Società Agricola Terra Madre s.r.l.s. as Data Controller, pursuant to articles 13 and 14 of the EU Regulation 2016/679 on the protection of personal data (hereinafter also “Regulation” or “GDPR”) and of art. 13 of Legislative Decree 196/2003 “Code for the protection of personal data containing provisions for the adjustment of national legislation to Regulation (EU) n. 2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals about the processing of personal data, and about the free movement of such data and repealing Directive 95/46 / EC (hereinafter also “Code”). to Users who surf the website http://www.masseriacasinabaronale.com (hereinafter also the “Website”).
The following information is provided only for the website http://www.masseriacasinabaronale.com and not for other websites that may be consulted by the User via links. The Data Controller will collect and process the data listed below in accordance with the provisions of the Code and the Regulations.

I Data Controller and contact information.

Terra Madre srls Agricultural Company, with registered office in Carpignano Salentino (LE), Strada Provinciale 48 Martano – Otranto Km. 11, telephone: 348 8818822, PEC: terra_madre@pec.it and e-mail: masseriacasinabaronale@gmail.com, VAT number: 04864140753.
The Data Controller is responsible for this privacy statement and for the cookies stored by their services.

II. Method of Treatment

The Data Controller processes the personal data provided and/or collected by users with analogue, IT and/or telematics tools, adopting the appropriate security measures for preventing unauthorized access to the systems and, therefore, their non-authorized disclosure, modification or destruction.
Personal data is also processed in aggregate form, with organizational methods and logic strictly suited to the purposes indicated in this statement. Data may be displayed by categories of subjects authorized by the Data Controller, also called in charge of data processing and involved in the organization of the provision of services connected to the website (such as, for example, administrative or commercial staff, marketing department, legal department or system administrators) or even from external parties (third party technical service providers, couriers, hosting providers) who will be appointed, if the Data Controller deems it necessary, Data Processors. The updated list of managers and appointees may always be requested by the interested party and is available at the registered office of the Data Controller.

III. Data collected and purposes

a) Contact details
These data are requested when the User is filling out the information request and booking forms on the website and include: Name, Surname, address, telephone number, e-mail and may be processed by the Data Controller for the following purposes:

1. to fulfill the specific requests of the User;
2. to provide confirmation for booking rooms in the periods indicated by the user;
3. upon consent of the User, to establish and manage commercial relations, especially for commercial promotion, advertising communication, market research, surveys, statistical processing and marketing purposes relating to products and services provided by the Data Controller, using both Automated Contact Mode pursuant to art. 130 of the Privacy Code (electronic mail, sms, mms, WhatsApp, telefax, etc.), both Traditional Contact Modes (paper mail or calls with operator);
4. upon consent of the User, to measure your satisfaction and consent concerning products and/or services offered, in relation to the analysis of habits and purchase choices, and to carry out market research choices made directly by the Data Controller.

The purposes referred to in points 3) and 4) above may be carried out by the Data Controller also through the use of cookies, as specified in point V of this statement, prepared pursuant to the Provision of the Privacy Guarantor of 05.08.2014 “Identification of simplified procedures for the information and the acquisition of consent for the use of cookies”.

b) Navigation Data
The Website’s computer systems and software procedures acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified people, but by its nature it could, through processing and association with data held by third parties, identify users.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the response status given by the server (successful, error etc.) and other parameters relating to the operating system and the User’s computer environment.
This data is used only to obtain anonymous statistical information on the use of the website and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website: except for this eventuality, the data itself is kept for the time defined in the following point IV of this Policy.

c) Provision of data
The provision of contact data for the purposes referred to in section III a.1 and III a.2 of this Policy is mandatory and its lack, even partial, will make it impossible for the Data Controller to proceed with the provision of the services requested.
The provision of Registration data for all the purposes referred to in points III a.3 and III a.4 is optional and there are no consequences in the event of refusal to provide data, unless it is impossible to inform the User about promotional activities or to check users’ satisfaction.
The User assumes the responsibility of the Personal Data of third parties communicated or shared through the website http://www.masseriacasinabaronale.com and guarantees to have the right to communicate or diffuse them, freeing the Data Controller from any liability to third parties.
The Personal Data may be entered voluntarily by the User, or collected automatically during navigation on the website http://www.masseriacasinabaronale.com.

IV. Place and duration of the processing of the collected Data

a) Place
The Data are processed at the operational headquarters of the Data Controller and of the Data Processors, and at any other place where the parties involved in the processing are located.
Some of our service providers (e.g. of a technological nature) use data centers or qualified subcontractors that are not established in the European Union, and this may imply a transfer of personal data outside the European Union. When this happens, the legal basis of this transfer is the signing by these suppliers of contractual clauses in accordance with the standard defined by the European Commission.
If personal data is transferred to a third country or to an international organization, the interested party may be informed of the existence of adequate guarantees pursuant to Article 46 of the “Regulations” relating to the transfer by contacting the Data Controller at the e-mail address info@masseriacasinabaronale.com.

b) Duration of treatment and storage
The Data is processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always request the interruption of Treatment or cancellation, updating and modification of the Data .
The Data will not be stored beyond 24 months limited to personal data and for marketing purposes only, in compliance with the instructions of the Authority for the Protection of Personal Data on the subject. For the exercise of the right of defense, instead, the duration of the treatment will be equal to the expiration of the term of forfeiture for the ordinary legal action.

V. Cookie Policy

This website uses cookies.

a) Information on Cookies
A cookie (from English, literally, “cookie”) is a small and light text file that is generated by web services to memorize the preferences, activities and tastes of users. The cookie created by a service can be read and modified by it to best characterize its users and, above all, to recognize the user when he returns to the website.
Therefore, different information can be stored in the cookie for different purposes, but only if the user has enabled the installation of cookies from browser preferences.
Cookies are not and cannot be dangerous in the usual sense of the word: in fact, they cannot in any way carry viruses or other kinds of malware. Instead, they can be used to track user behavior on websites that adopt certain services.
In general, cookies can be completely disabled from your browser settings at any time. For more information, we recommend reading the help and support pages related to it provided by the developers of the same.

b) Types of cookies in use
Google Analytics
Google Analytics is a third party web analysis service provided by Google Inc.
Google uses the personal data collected through its scripts to trace and examine the navigation on this site and the services offered by it, to compile reports and share them with other third-party services developed by Google.
Google uses personal data to contextualize and personalize the ads of its own advertising network composed of Adsense and Adwords.
Personal data collected: Cookies and navigation data on the website.
Place of processing: USA
Privacy Policy
You can exercise the right to opt out of Google Analytics from here.

Facebook Ads Pixels
Provided by Facebook, Inc.
The Facebook Ads pixel is used to monitor the conversion of advertisements published by the Website Owner on Facebook.
The service links the data coming from the Facebook advertising network with the actions carried out on this site.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Facebook, Inc. adheres to the Privacy Shield.
Privacy Policy

Google Ads (Google Inc.)
Google Ads is a remarketing and behavioral targeting service provided by Google Inc. that links this Website to the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.

VI. Rights of the interested parties

The subjects to whom the Personal Data refer as interested parties may exercise their rights pursuant to articles 13, 14, 16, 17, 18, 19, 20 and 21 of the “Regulations” and, therefore, in summary:

• to ask the Data Controller for access to personal data and the correction or cancellation of them, or the limitation of the processing that concerns them or to oppose their treatment, in addition to the right to data portability;
• to obtain from the individual Data Controller confirmation that a processing of personal data concerning him\her is being carried out and, in this case, to obtain access to personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, especially if they are recipients of third countries or international organizations; d) when possible, the period of storage of personal data provided or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to request the data controller to rectify or cancel personal data or limit the processing of personal data concerning him\her or to oppose their processing; f) the right to file a complaint with a supervisory authority; g) if the data is not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4 of the Regulation and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such treatment for the interested party;
• to obtain from the Data Controller the correction of inaccurate personal data concerning him\her without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration;
• to obtain from the Data Controller the cancellation of personal data concerning him\her without unjustified delay. The Data Controller must cancel personal data without unjustified delay, if one of the following reasons exists: a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed; 4.5.2016 L 119/43 Official Journal of the European Union EN, (b) the interested party withdraws the consent on which the processing is based in accordance with Article 6 paragraph 1, letter a) or Article 9 paragraph 2 , letter a) of the Regulation and if there is no other legal basis for the processing; c) the interested party opposes the processing pursuant to Article 21, paragraph 1 of the Regulation and there is no legitimate prevailing reason to proceed with the processing, or he opposes the processing pursuant to Article 21, paragraph 2 of the Regulation; d) personal data have been unlawfully processed; e) personal data must be deleted in order to fulfill a legal obligation established by the law of the Union or of the Member State to which the Data Controller is subject; f) personal data have been collected in relation to the offer of information society services pursuant to Article 8, paragraph 1 of the Regulation;
• to obtain the treatment limitation from the Data Controller when one of the hypotheses of Article 18 of the “Regulation” applies;
• to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him\her provided to the Data Controller to be able to transmit such data to another Data Controller without impediment if: a) the processing is based on the consent pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a) of the “Regulation” or of a contract pursuant to article 6, paragraph 1, letter b) of the “Regulations”; and b) the processing is carried out by automated means;
• to oppose at any time, for reasons related to his\her situation, to the processing of personal data pursuant to article 6, paragraph 1, letters e) or f) of the “Regulations”, including profiling on the basis of these provisions. The Data Controller will refrain from further processing the personal data unless he\she demonstrates the existence of legitimate cogent reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or the defense of a right in court;
• to request the complete cancellation of the data concerning him\her, exercising his\her right to oblivion, without prejudice to the possibility of the Data Controller to keep only the necessary data in another database, separate from the one with which he\she makes the processing, to exercise his\her right of defense.

VII. Right of opposition

• If personal data is processed for direct marketing purposes, the interested party has the right to oppose at any time to the processing of personal data concerning him\her for these purposes, including profiling to the extent of the connection to this direct marketing.
• If the interested party opposes to the processing for direct marketing purposes, the personal data can no longer be processed for these purposes.

VIII. Changes to this privacy policy

The data controller reserves the right to make any modification to this policy by giving publicity on this page.
At the end of this policy the date of the last modification will be shown to allow the tracking of the modifications. A copy of each version of this policy is available to interested parties at the data controller’s registered office.
If the user does not accept the changes made, he\she can ask the Data Controller to remove his\her personal data. Unless otherwise specified, the previous privacy and cookie policy will continue to be applied to personal data collected up to that point.
In case of non-acceptance of the changes made to this privacy policy, and without prejudice to the rights of the interested party referred to in the previous articles, he\she may request the Data Controller to remove his\her Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.

IX. Legal references

Directive 2002/58/EC, as modified by Directive 2009/136/EC, provision of the Privacy Guarantor n. 229 of May 8th 2014, Legislative Decree 196/2003, EU Regulation 2019/679.
Otranto, March 30, 2019