Privacy Policy
Last updated: 16 October 2026
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”) and Italy’s Personal Data Protection Code (Legislative Decree 196/2003, as amended). It explains how personal data is processed when you use this website. Fields marked as required are needed to submit the form.
1. Data controller and contact
The data controller is [FULL NAME / COMPANY NAME], [LEGAL FORM], with registered/business address at [FULL ADDRESS], tax code [TAX CODE] and VAT number [VAT NUMBER] (the “Controller”). For privacy enquiries or to exercise the rights below, contact info@agriturismoilmusaccio.it. [ADD THE DPO’S NAME AND CONTACT DETAILS IF ONE HAS BEEN APPOINTED; OTHERWISE REMOVE THIS NOTE.]
2. Data processed and source
When you complete the contact form, we process your first name, last name, email address, optional telephone number and the message you send, which may contain information you choose to include. First name, last name, email and message are required to handle the enquiry; telephone is optional. Do not include special-category information (such as health data) or other people’s data unless strictly necessary.
Systems delivering the website may also record technical and security data such as IP address, request date and time, URL and browser information in server logs. The form uses anti-abuse and request-limiting measures. The website stores your selected language in the browser using the technical cookie described in the Cookie Policy.
Data is provided by you or generated while you browse. Google Analytics and advertising/retargeting trackers are not currently used on this website. Google Search Console is used by the site operator to manage search results; it is not a tracking tag installed in a visitor’s browser.
3. Purposes and legal bases
To handle and respond to an enquiry or take steps before a contract at your request: Article 6(1)(b) GDPR where the enquiry concerns a possible stay; otherwise Article 6(1)(f) GDPR, the legitimate interest in responding to communications received.
To protect the form and website from spam, abuse and security incidents, and to establish or defend legal claims: Article 6(1)(f) GDPR, based on the Controller’s legitimate interest in keeping its services secure.
Newsletters, promotional messages, profiling and retargeting are not enabled through this form. If introduced, data will be used only after separate, freely given, specific and withdrawable consent has been obtained where required. Refusing consent will not prevent you from making an accommodation enquiry. You can object to direct marketing at any time.
Google Analytics is not currently installed. If it is introduced, non-essential analytics data will be collected only after prior consent where required, and this notice and the Cookie Policy will be updated before activation.
4. Whether you must provide data
The fields marked as required are needed to submit and handle your message; without them we may be unable to respond. Providing a telephone number is optional. You do not have to provide additional information that is not relevant to your enquiry.
5. Recipients and service providers
Data is available to people authorised by the Controller and may be shared with providers of hosting, email, website maintenance and security services, appointed as processors where required. Your message is forwarded to the mailbox used by the Controller: [IDENTIFY THE EMAIL MAILBOX PROVIDER AND VERIFY ITS ROLE/AGREEMENTS]. Before publication, identify the actual providers and update this notice.
To display the calendar, the website server retrieves an iCal feed from Booking.com and returns unavailable dates to the browser. The visitor’s browser does not directly contact Booking.com in this process, and the website does not send form data to the feed.
We do not sell personal data. Other disclosures are made only where required by law or necessary to protect legal rights.
6. Transfers outside the European Economic Area
Transfers depend on the providers actually used. Before publication, verify where hosting and email providers process data and state any transfers outside the European Economic Area, the GDPR transfer mechanism used (such as an adequacy decision or standard contractual clauses), and how to obtain further information. Do not activate new Google or marketing services without this review and an update to this notice.
7. Retention
Enquiries and related communications are kept for as long as needed to handle them and afterwards for [INSERT A VERIFIED, SPECIFIC PERIOD], unless a booking, legal obligation or the establishment or defence of claims requires a different period. Technical logs and anti-abuse data are kept for [INSERT THE ACTUAL PERIOD USED BY THE PROVIDER/SYSTEM]. If marketing is introduced, marketing data will be kept until consent is withdrawn or the activity ends, with periodic reviews and subject to applicable requirements.
8. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. To exercise your rights, contact info@agriturismoilmusaccio.it. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), without prejudice to other administrative or judicial remedies.
9. Automated decision-making
The Controller does not use this website to make decisions based solely on automated processing that produce legal effects or similarly significantly affect users.
10. Updates
This notice may be updated if processing or services change. The version published on this page applies.