Privacy Policy
Version: 18 May 2026
1. Controller
Podere Acquarello
Owner: Julia Antonie Dittrich (ditta individuale)
Loc. Acquarello n° 26
I-58024 Massa Marittima (GR), Italia
E-mail: info@podere-acquarello.com
Phone DE: +49 172 884 3640 | IT: +39 334 292 6036
VAT No.: IT01707690531 | C.F.: DTTJNT89S54Z112R
CIR: 053015AAT0117 | CIN: IT053015B5SSB9ECOF
Lead supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia, 11 – 00187 Roma, Italy
Tel.: +39 06 696771
E-mail: garante@gpdp.it
Website: www.garanteprivacy.it
2. Data processed, purposes and legal basis
| Category | Purpose | Legal basis |
|---|---|---|
| Booking & contract data | Contract performance, invoicing | Art. 6(1)(b) GDPR |
| Server log files | Technical operation, security | Art. 6(1)(f) GDPR |
| Contact enquiries (max. 24 months) | Processing enquiries | Art. 6(1)(b)/(f) GDPR |
| Questura registration data | Statutory notification obligation | Art. 6(1)(c) GDPR |
| Newsletter | Direct marketing with consent | Art. 6(1)(a) GDPR |
| Payment data | Payment processing | Art. 6(1)(b) GDPR |
3. Third-party processors and service providers
- Hetzner Online GmbH (hosting, EU servers, DPA in place pursuant to Art. 28 GDPR)
- Xenion – booking system (DPA in place pursuant to Art. 28 GDPR)
- Level 7 Logistics UG (haftungsbeschränkt), Egerländer Str. 12, 86316 Friedberg, Germany – shipping and dropshipping partner for online shop orders (DPA in place pursuant to Art. 28 GDPR)
- PayPal, Stripe, American Express, Mastercard, Visa – payment processing
- Questura di Grosseto – statutory guest registration via Alloggiati Web
- YouTube (Google Ireland Ltd) – embedded videos in enhanced privacy mode
4. Retention periods
- Booking and contract data: 10 years pursuant to Italian accounting law (Art. 22 D.P.R. 600/73)
- Contact enquiries: until resolved, maximum 24 months
- Server log files: 30 days, then anonymised or deleted
- Newsletter registration logs: 3 years as proof of consent
5. International transfers
Transfers outside the European Economic Area occur only where necessary for payment processing or newsletter dispatch, in particular through PayPal, Stripe, American Express, Mastercard, Visa, and Mailchimp.
All transfers are safeguarded by Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR or Binding Corporate Rules.
Please note that certain US providers may be legally obliged to disclose personal data to US authorities. An equivalent level of data protection to that of the European Union cannot always be guaranteed.
6. Newsletter
We send newsletters regarding our offers, news, and seasonal information about Podere Acquarello via Intuit Mailchimp.
- Provider: Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
- Processed data: e-mail address, optional name, IP address, registration timestamp
- Purpose: newsletter dispatch and proof of consent
- Legal basis: Art. 6(1)(a) GDPR
- Transfer to the USA based on Standard Contractual Clauses pursuant to Art. 46 GDPR
- Privacy Policy: mailchimp.com/legal/privacy/
Double Opt-In
- Newsletter subscriptions use a double opt-in procedure.
- After entering your e-mail address you will receive a confirmation e-mail and must actively confirm your subscription.
- Date, time, and IP address of registration and confirmation are logged and stored for 3 years as proof of consent.
- You may unsubscribe at any time via the unsubscribe link in every newsletter or by contacting info@podere-acquarello.com.
7. Cookies
This website uses only technically necessary cookies, including session cookies and shopping cart cookies. These cookies are required for the proper operation of the website and do not require consent pursuant to Art. 6(1)(f) GDPR. We do not use analytics, tracking, or marketing cookies.
8. YouTube
This website embeds YouTube videos exclusively in enhanced privacy mode (youtube-nocookie.com). Provider: Google Ireland Limited, Dublin. A connection to YouTube servers is established only when a video is actively played.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of our online offers). Google Privacy Policy: policies.google.com/privacy
9. Google Fonts
This website uses Google Fonts that are installed locally on our servers. No connection to Google servers is established and no data is transferred to Google.
10. Social Media
This website contains links to our social media profiles. When clicking such links you leave our website and the respective provider processes your data independently. We do not use Facebook Pixel or comparable tracking technologies.
11. SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the “https://” prefix in your browser address bar and the lock icon.
12. Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent with future effect at any time
- Lodge a complaint with the Garante or the supervisory authority at your habitual residence
Contact: info@podere-acquarello.com
13. Changes to this policy
This Privacy Policy is updated whenever our services or legal obligations change. The current version is always available at https://www.podere-acquarello.com/en/privacy-policy/.
