Privacy Policy

1. Data controller

Name: LA FONTE DI MARIELLA
Address: [TODO: full address]
Privacy email: info@agriturismomariella.com

2. Personal data processed

Through the contact form we may collect: name and surname, email address, phone number (if provided) and the content of the message.

Technical security data may also be processed, including server logs and anti-spam related data.

3. Purpose and legal basis

Data is processed only to handle and reply to requests submitted through the website.

The legal basis is the performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR) and, for security purposes, the controller's legitimate interest (Art. 6(1)(f) GDPR).

Data is not used for direct marketing unless separate explicit consent is provided.

4. reCAPTCHA and abuse prevention

The website uses Google reCAPTCHA to prevent automated submissions and contact form abuse. The service may process technical data (for example IP address, user agent and interactions) according to Google's policies.

5. Retention

Requests are stored for as long as needed to manage the request and then for a limited and proportionate period.

Indicative retention period: [TODO: e.g. up to 12 months after the request is closed].

6. Recipients and processors

Data may be processed by technical providers involved in hosting and website security, appointed where necessary as processors under Art. 28 GDPR.

Updated list of key providers: [TODO: insert relevant providers].

7. Transfers outside the EEA

Some third-party services (e.g. Google reCAPTCHA) may involve data transfers outside the EEA. In those cases, GDPR safeguards apply (e.g. standard contractual clauses, where applicable).

8. Data subject rights

You may exercise the rights provided under Arts. 15-22 GDPR: access, rectification, erasure, restriction, objection and, where applicable, portability.

To exercise your rights, write to info@agriturismomariella.com.

9. Complaint to the supervisory authority

If you believe the processing infringes applicable law, you may lodge a complaint with the relevant data protection authority.