Privacy Policy

1. Data Controller

2. Data collected and purposes of processing

Personal data collected through the puglienzo.it website and the booking form include:

• Contact data: name, surname, email address, phone number.
• Booking data: date, time, number of participants.
• Payment data: managed securely through Stripe; Puglienzo does not store credit card data.
• Navigation data: IP address, browser type, pages visited (collected automatically).

Data are processed for:

• Management and fulfillment of bookings;
• Fulfillment of legal obligations (mandatory contractual document on board);
• Communications regarding the booked service;
• Website improvement.

3. Legal basis for processing

Processing is based on:

• Execution of a contract (Art. 6, para. 1, letter b GDPR) for bookings;
• Legal obligation (Art. 6, para. 1, letter c GDPR) for maintaining the contractual document;
• Consent (Art. 6, para. 1, letter a GDPR) for promotional communications, where requested.

4. Data retention

Booking data is stored for 10 years, in accordance with fiscal and legal obligations. Navigation data is stored for a maximum of 12 months.

5. Data sharing

Data is not sold to third parties. It may be shared with:

• Stripe Inc. – payment processing;
• Competent authorities – where required by law.

6. Data subject rights

Pursuant to the GDPR (Arts. 15–22), the user has the right to:

• Access their personal data;
• Request rectification or erasure;
• Object to processing or request its limitation;
• Request data portability;
• Withdraw consent at any time.

To exercise these rights, write to: [email protected]

7. Cookies

The site uses technical cookies necessary for operation and analytical cookies (subject to acceptance). For more information consult the Cookie Policy.

8. Supervisory authority

The user has the right to lodge a complaint with the Personal Data Protection Authority (www.garanteprivacy.it).