Last updated: October 9, 2026

1. Data Controller

The controller responsible for processing personal data is:

Le Ginepraie S.r.l.s.
Podere Le Ginepraie, Località Pignano
56048 Volterra (PI), Italy

Email: info@leginepraie.com
Website: https://www.leginepraie.com

For questions about how we process personal data or to exercise your privacy rights, please contact us using the email address above.

2. Personal Data We Collect

When you visit our website, contact us, or request a reservation at Villa Le Ginepraie, we may collect and process the following personal information:

• First and last name.
• Email address and telephone number.
• Requested dates of stay.
• Number of adults and children traveling.
• Information voluntarily provided through email or other communication channels.
• Information necessary to manage reservations, invoicing, and applicable legal requirements.
• Technical browsing information, IP addresses, and information collected through cookies and analytics technologies, where applicable.

Providing personal information when requesting general information is voluntary. However, without certain details, we may be unable to respond to your inquiry or process a reservation.

Some information may be required to fulfill contractual or legal obligations.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Responding to Inquiries and Providing Quotes

To respond to questions about Villa Le Ginepraie, check availability, provide rates, and share information about accommodations and available services.

Legal basis: Taking steps at your request before entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation (GDPR).

Managing Reservations

To review and confirm reservations, communicate with guests, and coordinate requested services.

Legal basis: Performance of a contract or pre-contractual measures under Article 6(1)(b) of the GDPR.

Administrative and Legal Obligations

To manage invoices, accounting records, tax obligations, and legal requirements applicable to accommodation providers.

Legal basis: Compliance with legal obligations under Article 6(1)(c) of the GDPR.

Website Security and Functionality

To maintain the technical operation and security of our website.

Legal basis: Our legitimate interests, where permitted under Article 6(1)(f) of the GDPR.

Website Analytics and Advertising

To understand website traffic and evaluate the effectiveness of advertising campaigns using services such as Google Analytics and Meta Pixel.

Where required by applicable law, non-essential cookies and tracking technologies are activated only after obtaining the visitor’s consent.

4. Inquiries Through Instagram and Facebook

Le Ginepraie S.r.l.s. may receive inquiries through advertisements and lead forms available on Instagram and Facebook, platforms operated by Meta.

Information collected through these forms may include:

• Full name.
• Email address.
• Telephone number, when provided.
• Preferred travel dates.
• Number of guests.

We use this information to respond to inquiries, provide availability and pricing information, and assist potential guests with planning their stay at Villa Le Ginepraie.

We do not use inquiry details to send recurring newsletters or promotional emails without an appropriate legal basis.

Meta may also process personal information in accordance with its own privacy policies and applicable terms.

5. Reservations and Payments

Visitors may submit direct reservation requests through our website at https://www.leginepraie.com.

Reservations are reviewed and confirmed manually by Le Ginepraie S.r.l.s.

Online card payments may be processed through Nexi Pay by Link, a secure payment service that allows guests to enter their payment information directly into the payment environment provided by Nexi.

Le Ginepraie S.r.l.s. does not collect or store complete payment card details entered through Nexi Pay by Link.

Nexi processes payment-related information in accordance with its applicable privacy policies and service terms.

6. Data Retention

Personal information relating to inquiries that do not result in a reservation is retained for a maximum of 24 months after the last communication, unless a longer retention period is necessary for a specific lawful purpose or legal obligation.

Information relating to confirmed reservations, invoices, accounting, and administrative obligations is retained for the periods required by applicable law.

Information collected through cookies and analytics technologies is retained according to the settings and policies of the relevant services, as further described in our Cookie Policy.

7. Service Providers and Data Recipients

To operate our website and manage our services, we use third-party providers, including:

• Aruba: Website hosting and email services.
• Nexi: Online payment processing through Pay by Link.
• Google: Website analytics services.
• Meta: Advertising services and lead generation through Instagram and Facebook.

Personal information may also be shared with authorized personnel, professional advisers, and service providers when necessary to operate our business or comply with legal requirements.

Each provider processes personal information according to its applicable contractual arrangements and responsibilities under data protection law.

8. International Data Transfers

Some digital services, particularly those provided by Google and Meta, may involve the transfer of personal data to countries outside the European Economic Area (EEA).

Where applicable, such transfers must comply with the GDPR and rely on appropriate legal safeguards, including adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

9. Cookies and Tracking Technologies

Our website uses essential cookies and may also use analytics and marketing cookies provided by third parties.

For more information about the cookies used, their purposes, and how to manage your preferences, please consult our:

Cookie Policy: https://www.leginepraie.com/cookie-policy-ue/

Visitors can manage their cookie preferences using the consent management tools available on the website, where applicable.

10. Your Privacy Rights

Under Articles 15–22 of the GDPR, you may have the following rights, subject to applicable legal conditions:

• Right of access: Request access to the personal information we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete information.
• Right to erasure: Request deletion of your personal information.
• Right to restriction: Request that certain processing activities be restricted.
• Right to object: Object to certain types of personal data processing.
• Right to data portability: Request a copy of eligible personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Withdraw previously granted consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact:

info@leginepraie.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.

11. Data Security

Le Ginepraie S.r.l.s. implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, disclosure, alteration, or unlawful processing, taking into account the nature of the information and the associated risks.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legal requirements, technology, business operations, or the services we provide.

The latest version will be published on this page, together with the date of its most recent update.