Privacy and cookies

Notice on the processing of personal data

In accordance with the GDPR, Regulation (EU) 2016/679 (General Data Protection Regulation), we provide the required information on the processing of the personal data you supply. This notice does not apply to other websites that may be reached through links on the controller's websites; the controller is in no way responsible for third-party websites.

Personal data that may be processed: 'personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Recitals 26, 27, 30, Regulation (EU) 2016/679).

Contact information

Data controller: Azienda Agricola Locanda de l'Arguta di Nicolli Alessandro – VAT no. 01549350229, Via delle Ischie 37, 38123 Romagnano (Trento), Italy.

Email address of the controller for all requests: info@locanda-arguta.it

Personal data collected

On this website we collect personal data through data entry forms and usage data during normal browsing of the content. The data are processed for the following purposes and using the following services, in their respective places of storage and processing:

Contacting the user / handling requests

Availability request form. Personal data collected: first name, last name, mobile number, email, arrival and departure dates, type of stay (room or pitch) and any notes. The data are not stored on the website: they are sent by email to the property through the email delivery service Brevo (Sendinblue SAS, Paris, France). Brevo states in its privacy policy that data may also be transferred outside the European Union, in particular to the United States and India.

Anti-spam protection (Cloudflare Turnstile). On the contact pages the form is protected by Cloudflare Turnstile, which checks that the request is sent by a person. Personal data collected: IP address and technical browser data. Provider: Cloudflare, Inc. (USA).

Statistics

Google Analytics 4. Activated only after consent is given in the cookie banner; consent can be withdrawn at any time from the «Cookie preferences» link at the bottom of every page. Personal data collected: Cookies and Usage data. Place of processing: USA.

Content from external platforms

Garda AI events widget. Only on the «Events in Trento» page: it shows local events loaded from the external service Garda AI (api.gardaai.it). Personal data collected: Usage data as described in the service's privacy policy.

Online booking. The «Book» button leads to the external booking system (secure-reservation.cloud), which processes the data you enter according to its own privacy policy. The website only passes on the arrival and departure dates you choose.

Website hosting

Cloudflare Pages. The website is hosted by Cloudflare, Inc. (USA), which processes the technical browsing data needed to deliver the pages (for example IP address and browser type).

Rights of users

Users may exercise certain rights regarding the Data processed by the Controller.

In particular, the User has the right to:

• withdraw consent at any time. The User may withdraw consent previously given to the processing of their Personal Data.
• object to the processing of their Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent. Further details on the right to object are given in the section below.
• access their Data. The User has the right to obtain information on the Data processed by the Controller, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and request rectification. The User may verify the accuracy of their Data and ask for it to be updated or corrected.
• obtain restriction of processing. Under certain conditions, the User may request the restriction of the processing of their Data. In that case the Controller will not process the Data for any purpose other than storing it.
• obtain the erasure or removal of their Personal Data. Under certain conditions, the User may request the erasure of their Data by the Controller.
• receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance. This applies when the Data are processed by automated means and the processing is based on the User's consent, on a contract to which the User is party or on pre-contractual measures.
• lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of official authority vested in the Controller or for the Controller's legitimate interests, Users may object to the processing on grounds relating to their particular situation.

Users are informed that, where their Data are processed for direct marketing purposes, they may object to the processing without giving any reason. To find out whether the Controller processes data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise your rights

To exercise the User's rights, Users may send a request to the Controller's contact details given in this document. Requests are free of charge and are handled by the Controller as soon as possible, and in any case within one month. Some changes can be made by the user directly, as described in the next section.

Cookie policy

This website uses a technical cookie (cc_cookie, lasting 182 days) that remembers the choice made in the cookie banner, and Google Analytics 4 cookies (_ga and _ga_<ID>) only after consent. Consent can be given, refused or withdrawn at any time from the banner or from the «Cookie preferences» link at the bottom of every page.

Recipients and sharing of data with third parties

We will never sell personal information to third parties. We do not exchange, share or transfer your personal data to third parties, except in the following limited circumstances.

The personal data provided may be disclosed to recipients who will process them as processors and/or as natural persons acting under the authority of the Controller and the Processor, in order to fulfil contracts or related purposes.

Specifically, your personal information may be disclosed to recipients in the following categories:

• the service providers named in this notice, only for the functions described: Cloudflare, Inc. (website hosting and anti-spam protection), Brevo (sending the contact form emails), Google (statistics, only with consent), the online booking system and Garda AI (events widget);
• third parties in general when we believe in good faith that access to, use, retention or disclosure of such data is reasonably necessary to (a) comply with any applicable law, regulation, legal process or governmental request, (b) enforce an Agreement with the Customer, including investigation of potential violations thereof, or (c) protect against imminent harm to our rights, property or safety, or that of our users or the public, as required or permitted by law.

We may share your personal information with third parties (outside the categories above) if we have your explicit consent to do so.

We may also share aggregated or anonymised data with third parties for other purposes. These data do not identify the user individually, but may include data on usage, viewing and user behaviour.

Security of your personal data

We use a variety of security technologies and procedures to protect personal data from unauthorised access, use or disclosure. We protect the Personal Data provided in the cloud and locally on servers in a controlled and secure environment, protected from unauthorised access, use or disclosure. When sensitive Personal Data (such as credit card numbers and/or geolocation data) are collected on our Apps and/or transmitted to other websites, they are protected through encryption, such as the Secure Socket Layer (SSL) protocol.

This website has an https certificate, which makes it more secure, especially when entering personal information.

User control over data

Blocking cookies

You can remove or block certain cookies through your browser settings, but some features may then stop working properly. Your cookie choices for this website can be changed at any time from the «Cookie preferences» link at the bottom of every page.

Retention of personal data

We keep the Personal Data collected for the periods indicated below and for as long as we consider them potentially useful to contact you about the service requested, commercial information, subscription services, e-commerce and, where necessary, to comply with our legal obligations, resolve disputes and enforce our agreements; after which they are deleted.

The retention period varies according to the type of data, as follows:

• browsing this website (for the duration of the session); some cookies may last longer, as stated in the cookie policy;
• contact, information and booking requests (no expiry);
• fulfilment of contractual and legal obligations and administrative and accounting purposes (up to 10 years, unless a longer or shorter period is set by law).

Once the retention period has expired, the Personal Data will be deleted. Therefore, the rights of access, erasure, rectification and data portability cannot be exercised after the retention period has expired.

No minors under 18

The content of the website is available to everyone and contains no adult material. However, the information is not intended for use by minors, and the Controller does not knowingly collect or solicit personal data from anyone under 18. If you are under 18, you may not attempt to register for the services provided or send any information about yourself, including name, address, telephone number or email address. If we find that we have collected personal data from minors without verification of parental consent, we will delete such data promptly. If you are a parent or legal guardian of a minor under 18 and believe we may have data from or about that minor, please contact us at the address given in this notice.