1. Data Controller
The Data Controller for personal data is Il Pumo di Puglia, email: borgotortorella@gmail.com.
2. Types of Data Collected
Data provided directly by users: name, email, phone number, and any content submitted via contact or booking forms.
Technical data: such as cookies, IP address, and browsing data automatically collected on the website.
3. Purpose and Legal Basis of Processing
Your personal data is processed for the following purposes:
To respond to information or booking requests (legal basis: contract or pre-contractual obligations).
For administrative purposes, accounting, or legal compliance (legal basis: legal obligation).
For cookies and tracking activities (subject to user consent) for statistical analysis or marketing (legal basis: consent).
4. Data Processing and Retention
Data is processed electronically and securely.
It will be retained only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with legal obligations, for a maximum period of [e.g., 10 years].
5. Data Disclosure to Third Parties
Data may be shared with third-party service providers acting on behalf of the Data Controller (e.g., hosting providers, email services, booking software).
Personal data will not be publicly disclosed.
6. Data Transfers
Data will not be transferred outside the European Union.
If such transfer occurs, it will be carried out under EU Standard Contractual Clauses and only with adequate security measures in place.
7. Data Subject Rights
You have the right to:
Access your data
Rectify or erase it (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
File a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it
8. Cookies and Tracking Tools
This website uses technical cookies (necessary for functionality) and, only with your prior consent, may use analytical or profiling cookies.
Preferences can be managed via the cookie banner or your browser settings.
9. Policy Updates
This Privacy Policy may be updated periodically. Please check this page regularly to stay informed about any changes.
GDPR (EU Regulation 2016/679) – transparency, lawfulness of processing, and data subject rights.
Italian Privacy Code and opt-in rules for marketing communications.
e-Privacy Directive – obligations regarding the use of cookies and online tracking.