Privacy Policy

Last updated: May 2026

In accordance with Regulation (EU) 2016/679 ("GDPR") and Italian data protection legislation, this page describes how we process the personal data of users who browse the site and submit requests through the contact form.

1. Data Controller

The data controller is Michela Conti, based in Via Nilde Iotti 112, 56012 Calcinaia (PI), Italy.
Tax Code: CNTMHL68S56B950Z
Email: ilgirasole.calcinaia@gmail.com

2. Types of Data Collected

Through the contact form on the site, we collect the following personal data:

• Name
• Email address
• Message subject
• Message content

Providing the data is optional, but failure to do so will make it impossible to receive a response to your request.

3. Purpose of Processing

The personal data provided is processed exclusively for:

• Responding to information requests submitted through the contact form
• Managing communications related to the stay and requested services

The data is not used for marketing, profiling or third-party communication purposes.

4. Legal Basis for Processing

The processing is based on the legitimate interest of the controller in responding to data subjects' requests (Art. 6(1)(f) GDPR) and, where applicable, on the implicit consent given by the user through voluntarily sending their data via the contact form.

5. Processing Methods

Data is transmitted via email to the controller through a form protected by anti-spam mechanisms. No database is used for data storage; information remains exclusively in the controller's email inbox.

Processing is carried out using IT tools, with adequate technical and organisational measures to ensure data security and confidentiality.

6. Retention Period

Personal data is retained in the controller's email inbox for the time necessary to handle the request and, subsequently, for a period not exceeding 24 months, unless the data subject requests deletion.

7. Data Communication and Disclosure

The personal data collected is not communicated to third parties, nor disclosed or transferred outside the European Union. Data is accessible exclusively to the data controller.

8. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:

• Obtain confirmation of the existence of personal data concerning them and its communication (right of access)
• Obtain the rectification of inaccurate data (right to rectification)
• Obtain the erasure of data (right to be forgotten)
• Obtain the restriction of processing
• Receive the data in a structured format and transfer it to another controller (right to portability)
• Object to processing on legitimate grounds

To exercise these rights, you may contact the controller at ilgirasole.calcinaia@gmail.com. Requests will be handled within 30 days.

9. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it), if they believe that the processing of their data violates applicable law.

10. Cookies

This site does not use profiling cookies or third-party cookies. Only strictly necessary technical cookies are used for the operation of the site, which do not require consent under applicable law.

The site does not integrate statistical analysis tools (e.g. Google Analytics), tracking pixels, social plugins or other tools that involve the collection of browsing data by third parties.

11. Changes to This Policy

This policy may be subject to changes over time. Users are encouraged to periodically check this page to review any updates.