TASTING TOUR OF TUSCANY - PREMIUM

PRIVACY POLICY OF THIS WEBSITE
UNDER REGULATION (EU) 679/2016 AND
TO THE LAW DECREE 196/2003 AS AMENDED BY THE LAW DECREE 101/2018

CONTROLLER
Following up the visit to this website the data concerning identified or identifiable persons may be processed. The Controller of their processing is Carpineto S.r.l., established in Loc. Dudda 17/B, 50022 Greve in Chianti (FI), fiscal code and VAT number IT03145570481.

PURPOSES OF PROCESSING
The purposes for which the data are collected are the following:

After a form on the site is filled in, data is “stored” in a database for a year
A user can request the deletion of data provided at any time by contacting info@carpineto.com
User data is used to periodically communicate information (products, events, discounts,
newsletters etc.)

LAWFULNESS OF PROCESSING
The data are processed by Carpineto S.r.l. in order to pursue the legitimate interest of the controller to provide a concerned subject with information about their Company.

PLACE OF DATA PROCESSING
Loc. Dudda 17/b – 50022 Greve in Chianti (Firenze) Telefono (055) 85.49.062-85.49.086 Fax (055) 85.49.001 e-mail: info@carpineto.com http:// www.carpineto.com C.C.I.A.A. Firenze n. 305343 – Mecc. FI 020318 Cod. Fisc. e Part. IVA IT03145570481

The processing linked to the web services of this website takes place in the above mentioned head office of Loc. Dudda 17/B, 50022 Greve in Chianti (FI) and it is carried out only by the technical staff of the Office in charge with the processing. In case of need, the data connected to the newsletter service may be processed by the staff of the company which handles the maintenance of the technological part of the website carpineto.com at the head office of the said company

TYPES OF DATA PROCESSED
The following types of data are processed:

● Web browsing data

The computer systems and the software procedures underlying this website, through their ordinary working, gather a few personal data which are implicitly transmitted while using the Internet communication protocols. It is a sort of information which is not collected to be linked to identified data subjects but which, for its own nature, might enable to identify the users through processing and associations with data held by third parties. This category of data comprises IP addresses or the names in the domains of the computers used by the users who log on to the website, the addresses in URI notation (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to make the request to the server, the size of the file received as feedback, the number code indicating the status of the feedback sent by the server (successful, failed, etc.) and other parameters related to the operational system and to the computer environment of the user. These data are utilized only to the purpose of obtaining anonymous statistical information about the use of the website and in order to monitor its correct functioning; they are deleted immediately after their processing. The data might be utilized to ascertain the responsibilities in case of hypothetical computer crimes against the website; except for this circumstance, at present the information about web contacts are not kept for more than seven days.

● Data voluntarily provided by the user.

The optional, explicit and voluntary sending of e-mail to the addresses shown on this website brings about the subsequent acquisition of sender’s address, necessary to reply to the requests, as well as of the other personal information, if any, included in the message. Specific synthetic advices shall be progressively borne by or displayed on the website, in the pages developed for specific services on demand.
● Cookies.

No personal user data is acquired by the site in this regard. We do not use cookies to transmit information of a personal nature, nor are persistent cookies used to track users. Session cookies (which are not stored permanently on the user's computer and disappear when browser is closed) are strictly limited to transmitting session identifiers (consisting of random
numbers generated by the server) needed to enable secure browsing and efficient site. Session cookies used on the site prevent the use of other IT techniques that may jeopardize user privacy. They do not allow the acquisition of personal identification data of the user.

MODALITIES OF PROCESSING
The data processing is carried out through computerized systems for the time strictly necessary to achieve the purposes for which they have been collected. Specific security measures are complied with in order to head off data loss, illicit or unfair use and unauthorized access.

RIGHTS OF THE DATA SUBJECT
Under the law provisions in force, the data subject can address the Controller to lodge a request for exercising his or her rights, such as they are stated in the Regulation (EU) 679/2016, art.15 and
following.

CONTROLLER, DPO IF ANY AND PRIVACY COMMUNICATIONS
The Controller is Carpineto S.r.l., established in Loc. Dudda 17/B, 50022 Greve in Chianti (FI), fiscal code and VAT number IT03145570481. For any communication pursuant to the above quoted articles of the Regulation (EU) 679/2016 the

Loc. Dudda 17/b – 50022 Greve in Chianti (Firenze) Telefono (055) 85.49.062-85.49.086 Fax (055) 85.49.001 e-mail: info@carpineto.com http:// www.carpineto.com C.C.I.A.A. Firenze n. 305343 – Mecc. FI 020318 Cod. Fisc. e Part. IVA IT03145570481

Controller provides the following address: Loc. Dudda 17/B, 50022 Greve in Chianti (FI); Phone numbers 055 8549062, 055 8549086; Fax number 055 8549001; Email info@carpineto.com.

CANCELLATION POLICY :   In case of cancellation of the tasting 4 days from check-in, a penalty of 30% will be applied. In case of no show due to No Show, 100% will be charged.

CANCELLATION WITH RECONFIRM A : If the cancellation is replaced by a new booking on another date, no penalty will be applied.