(EU Regulation 2016/679, Article 13 – “Personal Data Protection Code” – GDPR)
Pursuant to Article 13 of the General Data Protection Regulation (hereinafter “GDPR”), this page provides users who browse the website with information regarding the processing of their personal data.
1 – Data Controller
Agriturismo Fondo Paliemmu
Via Passo Parrino Muglifulo, 2
97015 Modica (RG)
Phone: +39 333 2165525
Email: info@agriturfondopaliemmu.it
2 – Categories of personal data processed by the Data Controller
Through its website, the Data Controller collects and processes browsing data and data voluntarily provided by users in order to offer better services and a satisfactory browsing experience.
Browsing data
For the normal and proper operation of the website, the software applications used and the related IT systems acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to identify specific users, but by its very nature may allow identification if processed and combined with data held by third parties.
This category of data includes, by way of example, IP addresses, request times, numerical response codes from the server, the user’s operating system or browser, and other parameters generated by the IT systems used.
Data voluntarily provided by the user
This category includes all data that the user voluntarily and optionally provides, for example by filling in a contact form on the website, sending an email, or calling the phone numbers provided to request information.
3 – Purposes and legal bases of processing
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of personal data. The data received will be processed exclusively using methods and procedures necessary to provide the requested services and for any additional purposes for which explicit consent has been given.
Browsing data will be used exclusively to obtain anonymous statistical information on the use of the website, to resolve any browsing errors, for IT security purposes, and to verify the proper functioning of the website. Furthermore, such data may be used to ascertain responsibility and identify the authors of computer crimes committed against this website.
The legal basis for processing is the legitimate interest of the Data Controller and, in the event of requests from Authorities, compliance with legal obligations.
Personal data voluntarily provided by the user will be used solely to process the request submitted and to fulfill any pre-contractual and/or contractual and/or legal obligations arising from such request.
The legal basis for processing is compliance with legal obligations incumbent upon the Data Controller and the performance of obligations strictly related to the pre-contractual and/or contractual relationship.
Personal data collected in specific sections of the website for services other than those described in this policy will be subject to the user’s explicit consent, as specified in the relevant privacy notices from time to time.
4 – Methods of data processing
The data provided will be processed only for specific, explicit, and legitimate purposes, primarily using electronic tools and, only marginally, paper-based methods.
For processing data collected through the website, the Data Controller uses servers located within the territory of the European Union and IT systems located at the Data Controller’s premises. No transfer of data outside the EU is envisaged.
Specific technical and organizational measures are adopted to ensure an adequate level of security and to prevent unlawful use, unauthorized disclosure, loss, or unauthorized access to the data.
5 – Duration of processing and data retention
Data provided by the user will be processed for the entire duration of the requested services and will be retained for the following 12 months for administrative purposes, as well as for the time required to comply with legal obligations.
6 – Failure to provide data
With the exception of browsing data necessary for IT and telematic protocols, the provision of data is free and optional for users through the various methods available on the website (contact forms, email, phone numbers, etc.).
However, failure to provide consent for data processing will make it impossible to process the data in order to handle the requests submitted or intended to be submitted by the user.
7 – Subjects who may access the data
Personal data provided will not be disclosed to parties unrelated to the normal activities required to process the submitted request.
The collected data may be processed by company employees involved in handling the request (administrative staff, customer service, system administrators).
The right to communicate data to third parties remains reserved where the user has provided specific and optional consent.
8 – Rights of the data subject
Article 12 of the GDPR grants the data subject the right to request from the Data Controller access to personal data, as well as rectification or erasure of such data, restriction of processing, objection to processing, and the right to data portability.
In particular, the user has the right:
- to know whether the Data Controller holds and/or processes personal data relating to them and to access such data, including obtaining a copy (Art. 15 – Right of access);
- to obtain rectification of inaccurate personal data or completion of incomplete personal data (Art. 16 – Right to rectification);
- to obtain erasure of personal data held by the Data Controller where one of the grounds provided for by the GDPR applies (Art. 17 – Right to erasure);
- to request restriction of processing of personal data where one of the conditions set out in the Regulation applies (Art. 18 – Right to restriction of processing);
- to receive their personal data in a structured, commonly used, and machine-readable format, or to request transmission to another Data Controller without hindrance (Art. 20 – Right to data portability);
- to object, in whole or in part, to the processing of data for the purposes of sending advertising material and market research (so-called consent) (Art. 21 – Right to object);
- to object, in whole or in part, to automated or semi-automated processing of data for profiling purposes (so-called consent).
If the user believes that the processing of their personal data through this website violates the GDPR, they have the right to lodge a complaint with the Supervisory Authority pursuant to Article 77 of the Regulation or to seek judicial remedy pursuant to Article 79.
The data subject may exercise their rights at any time, without formalities, by contacting the Data Controller using the contact details provided in Section 1 of this policy.
9 – Cookies
For information regarding cookies and similar tools used on this website, please refer to the Cookie Policy.
10 – Updates
The Data Controller reserves the right to amend this Privacy Policy at any time by notifying users on this page. Users are therefore encouraged to consult this page regularly, with reference to the date of the last update indicated below.
Last updated: January 30, 2026