INFORMATION FOR THE PROCESSING OF PERSONAL DATA

PURSUANT TO THE EUROPEAN REGULATIONS REGARDING THE PROTECTION OF PERSONAL DATA (GDPR)

the Tenuta Castelnuovo Tancredi in Buonconvento, loc. Castelnuovo Tancredi n. 93, P. Iva 01063340523, e-mail amministrazione@castelnuovotancredi.it and pec tenutacastelnuovotancredi@pec.it, as Data Controller (here in after "Data Controller"), informs you pursuant to art. 13 EU Regulation n. 679/2016 (here in after "GDPR") that personal data concerning it will be processed for the purposes and according to the methods set out in this document.

To this end, we inform you that the writer holds and processes your personal data for purposes related to the provision of the service requested by you:

• Sale of products and services
• Accommodation and hospitality

With particular reference to the keeping of accounting, invoicing and in general to implement all the obligations required by current legislation.

The provision of data is limited to those necessary for the fulfillment of a contractual nature and for the aforementioned purposes. Any refusal to provide data will make it impossible for the Data Controller to properly manage business relations, preventing the implementation of all the prerequisites and consequent acts of the existing relationship. Your data may also be used for sending informative material related to the agricultural and commercial production activity carried out by the owner, to the promotion of offers of new products.

In communicating that the processing of your data will be based on principles of correctness, lawfulness and transparency and in any case protecting their confidentiality, please note that they may be communicated, for operational and technical requirements strictly related to the aforementioned purposes:

• At Confagricoltura di Siena and / or professionals and other structures in charge, as data controllers, for the correct keeping of company accounts and for all accounting and management requirements related to the management of our company. economic activity
• To public administrations in execution of legal obligations;
• To banks, financial institutions or credit institutions, provided that such communication is necessary for the performance of economic activity and for the fulfillment of obligations assumed in your comparisons.

Data is not subject to disclosure.
The data will be kept by the Data Controller for the time necessary for the purposes for which they were collected and to comply with specific legal and / or contractual obligations.
Personal data will be processed on magnetic and / or electronic media or on paper, exclusively by employees and collaborators of the Data Controller, in their capacity as authorized data processing personnel, with the commitment of appropriate security measures to guarantee the confidentiality of the data interested party, undue access to third parties or unauthorized personnel.

At any time you can contact the Owner to exercise their rights, as provided for in Articles 15 to 21 of the GDPR, in particular, for the exercise of the right to request access to personal data and the correction or deletion of the same or the limitation of the processing that concerns them or to oppose their treatment, in addition to the right of data portability. However, this document does not affect the validity of the processing carried out by the Data Controller or by third parties authorized until that moment.

If you believe that your data have been treated illegitimately and violate the rules and principles regarding the protection of personal data, you have the right to contact the Supervisory Authority (Privacy Guarantor) to propose a complaint, according to the modalities from this last defined.

The interested party, in light of the foregoing, authorizes the processing of their data for the purposes described above.