Privacy Policy

Data Privacy Statement

Thank you very much for visiting our website www.tenuta-lecasenuove-castiglioncello.com and your interest in our company. Protecting your personal data is very important to us. Personal data refers to information about the personal or factual circumstances of a specific or identifiable natural person. It includes information such as a person’s real name, address, telephone number and date of birth, but also all other data that can be referred to an identifiable person.
As personal data is afforded special legal protection, we only collect it only to the extent necessary for the provision of our website and the delivery of our services. Below we will outline what personal information we collect when you visit our website and how we will use it.
Our data privacy practices comply with the statutory regulations and especially with those of the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Telemedia Act (Telemediengesetz, TMG) as well as the EU General Data Protection Regulation (GDPR). Your personal data is only collected, processed and stored to the extent required to offer you a functional website and provide our contents and services, allow the processing of inquiries and, if necessary, the processing of orders/execution of contracts, but only to the extent required for the legitimate interests within the meaning of Art. 6 (1) lit. (f) GDPR or as otherwise permitted by law. Only if you have previously provided your separate consent, will your data also be used for other purposes precisely specified in the consent, e.g. for sending you commercial information by newsletter.

Provision of website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. This includes the following data:

Scope of data processing

1. Information about the browser type and version used
2. The operating system of the accessing device
3. The Internet service provider of the accessing device
4. The IP address of the accessing device
5. Date and time of access
6. Websites from which the user’s system accesses our webpage (referrer tracking)
7. Websites accessed by the user’s system through our webpage (exit link tracking)

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user and therefore there is no identification of individual visitors to our website.

Legal basis for the processing of personal data

Art. 6 (1) lit f GDPR. Our legitimate interest is to ensure that the purposes described below are reached.

Purpose of data processing

Logging serves to ensure and maintain the compatibility of our website for all visitors, if possible, to prevent misuse and carry out troubleshooting activities. This requires the logging of the technical data of the accessing computer in order to be able to respond without delay to display errors, attacks on our IT systems and/or errors in the functions offered by our website. In addition, the data is used to optimize the website and generally ensure the security of our information technology systems.

Data retention period

The deletion of the aforementioned technical data takes place as soon as these are no longer needed to ensure the compatibility of the website for all visitors, however no later than 3 months after our website has been accessed.

Objection and deletion option

Objection and deletion options are governed by the general provisions regarding the right of objection and deletion of personal data according to data protection laws and regulations, as described further below in this privacy policy

Special features of our webpage

Our webpage offers you a variety of features which, when used, collect, process and save personal data. In the following, we will explain what happens to your data:

Contact form(s)

• Scope of the processing of personal data
  These are the data you have entered in our contact forms.
• Legal basis for the processing of personal data
  Art. 6 (1) lit. a GDPR.
• Purpose of data processing
  We will use the data captured through our contact form(s) only to process the specific inquiry received through the contact form.
• Data retention period
  The captured data will be deleted immediately after the inquiry has been processed, provided that no statutory retention periods apply.
• Objection and deletion option
  Objection and deletion options are governed by the general provisions on the right of objection and deletion of personal data according to data protection laws and regulations, as described further below in this privacy policy.

Comment function

• Scope of the processing of personal data
  These are the data you have entered in the comments.
• Legal basis for the processing of personal data
  Art. 6 (1) lit. a GDPR.
• Purpose of data processing
  Acceptance and publication of your comment on our website.
• Data retention period
  Your comment will be saved and published indefinitely. We reserve the deletion without giving reasons and without prior or subsequent information.
• Objection and deletion option
  Upon your request we will delete your comments immediately. Please use the “delete function” or contact us. The possibilities of objection and elimination are governed by the general regulations on data protection right of objection and cancellation claim described below in this privacy policy.

Statistical analysis of visits to this website – web trackers

When this website or individual files on the website is/are called up, the following data is collected, processed and saved by us: IP address, website from which the file was retrieved, file name, date and time of retrieval, data volume transmitted and successful retrieval notification (so-called web log). We only use this access data in a non-personalized form to continuously improve our website and for statistical purposes.
In addition, we use the following web trackers to analyse visits to this website:

Google-Analytics

• Scope of the processing of personal data
  We use the web tracking service of Google LLC, 1600 Amphitheater Park at 94043 Mountain View, USA (hereafter: Google Analytics). As part of web tracking, Google Analytics uses ”cookies” which are stored on your computer and allow an analysis of the use of our website and your websurfing behaviour (so-called “tracking”). We conduct this analysis on the basis of the tracking services provided by Google Analytics to continuously optimize our webpage and improve its availability. As part of the use of our website, data, in particular your IP address and your usage activity, is transmitted to servers of Google LLC and processed and stored outside the European Union, e.g. in the USA.
  The EU Commission has determined that the USA can ensure an adequate level of data protection if the data processing company has signed up to the US-EU Privacy Shield Agreement and the export of data to the US has been designed to ensure compliance with legal norms. By activating IP anonymization in the Google Analytics tracking code of this website, your IP address is anonymized by Google Analytics prior to transmission. This website uses a Google Analytics tracking code extended by gat._anonymizeIp(); to allow anonymized collection of IP addresses only (so-called IP masking).
• Legal basis for the processing of personal data
  Art. 6 (1) lit. a GDPR, either when registering with Google (opening a Google Account and accepting the privacy notifications implemented there) or, if you have not registered with Google, by explicitly agreeing to it when opening our webpage.
• Purpose of data processing
  Google will use this information on our behalf to analyse your visit to this webpage, to compile reports on website activity and to provide us with other services related to website activity and Internet usage. The IP address transmitted by your browser via Google Analytics is not merged with other data of Google LLC.
• Data retention period
  Google will store the data that are relevant to provide the web tracking services as long as necessary to execute the ordered web service. Data is collected and stored anonymously. As far as personal reference still exists, such is deleted without delay, unless subject to statutory retention obligations. In any case, the data is deleted after the retention obligation has expired.
• Objection and deletion option
  You can prevent the collection and transfer of personal data to Google (including your IP address, in particular) and the processing of this data by Google by disabling the execution of Script Code in your browser, installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com) or activating the “Do Not Track” setting of your browser. In addition, you can prevent the collection of the data generated by the Google cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by clicking on the link below (http:// tools.google.com/dlpage/gaoptout?hl=en) to download and install available browser plug-ins. The Google Analytics security and privacy policies are available at http://www.google.com/intl/en/analytics/learn/privacy.html.

Integration of external web services and data processing outside the EU

Our website uses active Java Script contents from external providers, so-called web services. By calling up our website these external providers may receive personal information about your visit to our website. In this context, data may be processed outside the EU. You can prevent this from happening by installing a JavaScript blocker such as the ‘NoScript’ browser plug-in (www.noscript.net) or by disabling Java Script in your browser. This may lead to functional restrictions on websites you visit.
We use the following external web services:

website-check.de

On our side, a web service of the company Website Check GmbH, Beethovenstraße 24 in 66111 Saarbrücken, DE (hereinafter: website-check.de) reloaded. We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to website-check.de. The legal basis for data processing is Art. 6 (1) lit. f DSGVO (legitimate interest). The legitimate interest consists in a faultless function of the website. The deletion of the data takes place as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of website-check.de: https://www.website-check.de/datenschutzerklaerung/. You can prevent the collection and processing of your data by website-check.de by disabling the execution of script code in your browser or install a script blocker in your browser (this can be found eg at www.noscript.net or www.ghostery.com).

Facebook Pixel Custom Audience

Our website uses Facebook Pixel Custom Audience, a service of Facebook Inc., Menlo Park, California, USA. Among other things, Facebook Pixel Custom Audience uses cookies that are stored across devices and allow an analysis of the use of the website. As part of the use of data, in particular the IP address and activities of the user are transmitted to a Facebook Inc. server and stored there. If necessary, Facebook Inc. will transfer this information to third parties if this is required by law or if such data is processed by third parties. The data itself primarily serves to provide user-based, cross-device advertising. You can prevent the collection and transfer of personal data (in particular your IP address) and the processing of this data by disabling the execution of Java Script in your browser or installing a tool such as ‘NoScript’. For more information on privacy when using Facebook Pixel Custom Audience, please visit the following link: https://www.facebook.com/full_data_use_policy. An opt-out option is available for download at the following link: http://www.youronlinechoices.com/en/praferenzmanagement/.

Facebook

Our pages are loaded with plug-ins from the company Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA and its affiliate Facebook Ireland Ltd., Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (Facebook). If you have activated scripts in your browser and have not installed a script blocker, your browser will forward your personal data to Facebook without asking you individually. When logged on, an immediate assignment of the data to the Facebook profile is possible. For more information, please see the Facebook privacy policy (https://www.facebook.com/about/privacy/). If you do not wish Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook user account and block the execution of Facebook script content in your browser, e.g. with the script blockers from www.noscript.net or www.ghostery.com.

Facebook Connect / Login

Our website uses Facebook Connect, a service of the company Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, or its affiliate, Facebook Ireland Ltd., Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (Facebook) . By logging on via the Facebook Connect button personal data will be transmitted to Facebook. If you do not wish Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook user account and block the execution of JavaScript content from Facebook in your browser, e.g. with the JavaScript blockers from www.noscript.net or www.ghostery.com.

Facebook Impressions

On our site JavaScript code is loaded from the company Facebook Inc., Menlo Park, California, USA (hereinafter: Facebook Impressions). If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transfer personal data to Facebook Impressions. For more information, see the Facebook Impressions Privacy Policy: https://www.facebook.com/privacy/explanation. In order to prevent the execution of JavaScript code from Facebook impressions altogether, you can install a JavaScript blocker (for example, www.noscript.net or www.ghostery.com).

Facebook Remarketing

This website uses the remarketing feature “Custom Audiences” from Facebook Inc. (“Facebook”). This function serves to present interest-based advertisements (“Facebook Ads”) to visitors of this website as part of their visit to the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on this website. By using this tag, a direct connection to the Facebook servers is made when visiting the website. This involves a transmission to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. For further information on the collection and use of data by Facebook, as well as your rights in this regard and ways to protect your privacy, please refer to the Privacy Policy of Facebook at https://www.facebook.com/about/privacy/. Alternatively you can disable the remarketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#_=_. For this you must be logged on to Facebook.

Google

Our website uses a web service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter: Google). The data is used to ensure the full functionality of our website. In this context, your browser may transfer personal data to Google. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure the correct function of the website. Google has signed up to the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data is deleted as soon as the purpose of data collection has been fulfilled. For more information on the handling of the transferred data, please see the Google Privacy Policy: https://www.google.com/intl/de/policies/privacy/. You can prevent the collection and processing of personal data by Google by disabling the execution of Script Code in your browser or by installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com).

Google Video

Our website uses a web service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter: Google Video). The data is used to ensure the full functionality of our website. In this context, your browser may transfer personal data to Google Video. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure the correct function of the website. Google Video has signed up to the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data is deleted as soon as the purpose of data collection has been fulfilled. For more information on the handling of the transferred data, please see the Google Video Privacy Policy: https://www.google.com/intl/de/policies/privacy/. You can prevent the collection and processing of personal data by Google Video by disabling the execution of Script Code in your browser or by installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com).

Googletagmanager.com

We use a web service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter: Googletagmanager.com). The data is used to ensure the full functionality of our website. In this context, your browser may transfer personal data to Googletagmanager.com. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure the correct function of the website. Googletagmanager.com has signed up to the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data is deleted as soon as the purpose of data collection has been fulfilled. For more information on the handling of the transferred data, please see the Googletagmanager.com Privacy Policy: https://www.google.com/intl/de/policies/privacy/. You can prevent the collection and processing of personal data by Google Tag Manager by disabling the execution of Script Code in your browser or by installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com).

Twitter

Our website uses plug-ins from the micro-blogging service twitter.com, which is operated by Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (Twitter). If you visit a website of our online presence which includes the Twitter plug-ins, your browser will establish a direct connection to the Twitter servers. As a result, personal data may be transmitted to Twitter, so that Twitter receives the information that you have personally accessed the corresponding page of our website. Twitter may optionally assign your visit to our website to your Twitter account. Even after logging out of Twitter, data will be transmitted to Twitter. Logging out only prevents the assignment of data to a Twitter account. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your related rights and settings options for the protection of your privacy you can find in the privacy policy of Twitter (https://twitter.com/privacy). If you do not want Twitter to collect data about you via our website, you must first activate the “Do not Track” function in your browser before visiting our website (https://support.twitter.com/articles/20169453), or alternatively disable in your browser the use of plug-ins from Twitter or block the execution of scripts for the twitter.com domain altogether (e.g. www.noscript.net or www.ghostery.com).

Youtube

Our website uses a web service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. (hereafter: YouTube). The data is used to ensure the full functionality of our website. In this context, your browser may transfer personal data to YouTube. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure the correct function of the website. YouTube has signed up to the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data is deleted as soon as the purpose of data collection has been fulfilled. For more information on the handling of the transferred data, please see the YouTube Privacy Policy: https://www.google.de/intl/de/policies/privacy/. You can prevent the collection and processing of personal data by YouTube by disabling the execution of Script Code in your browser or by installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com).

ytimg

Our website uses a web service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter: ytimg). The data is used to ensure the full functionality of our website. In this context, your browser may transfer personal data to Ytimg. The legal basis for data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure the correct function of the website. Ytimg has signed up to the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data is deleted as soon as the purpose of data collection has been fulfilled. For more information on the handling of the transferred data, please see the ytimg Privacy Policy: https://www.google.de/intl/de/policies/privacy/. You can prevent the collection and processing of personal data by Ytimg by disabling the execution of Script Code in your browser or by installing a script blocker in your browser (script code blockers are available, e.g. at www.noscript.net or www.ghostery.com).

Information about the use of cookies

• Scope of the processing of personal data
  We use cookies o various pages to enable the use of certain features of our website. These so-called ‘cookies’ are small text files that your browser can store on your computer. These text files contain a characteristic string that allows a clear identification of the browser when you return to our website. The process of saving a cookie file is also known as ‘setting a cookie’.
• Legal basis for the processing of personal data
  Art. 6 (1) lit f GDPR. Our legitimate interest consists in ensuring and maintaining the full functionality of our website, to increase its usability and to enable a more personalized approach to our customers. Individual visitors to our website can only be personally identified using cookie technology, if the visitor to our site has previously provided separate consent and provided us with personal data.
• Purpose of data processing
  The cookies are set by our website to maintain the full functionality of our website and to improve its usability. In addition, cookie technology allows us to recognize individual visitors by using pseudonyms, such as an individual, arbitrary IDs, which enables us to offer more personalized services.
• Data retention period
  Our cookies are stored until deleted in your browser or, in the case of a session cookie, until the session has expired.
• Objection and deletion option
  According to your requirements, you can make settings in your browser so that you are informed about cookies being set, can decide on whether to accept cookies on a case-by-case basis or categorically accept or decline the setting of cookies. Cookies can be used for different purposes, e.g. to identify that your PC has previously connected to a website (permanent cookies) or to save your most recently viewed websites (session cookies). We use cookies to provide you with enhanced user convenience. We advise that you accept cookies for our website to be able to use our convenience features. Otherwise, objection and deletion options are governed by the general provisions regarding the right of objection and deletion of personal data according to data protection laws and regulations, as described further below in this privacy policy.

Data security and data privacy, communication by e-mail

When collected, stored and processed, your personal data is protected by means of technical and organizational measures to ensure that it is inaccessible to third parties. Since complete data security cannot be guaranteed for unencrypted e-mail communication during transmission to our IT systems, we recommend sending highly confidential information by encrypted communication or postal service.

Automatic e-mail archiving

• Scope of the processing of personal data
  We expressly point out that our e-mail system includes an automated archiving process. All incoming and outgoing e-mails are thereby digitally archived in an audit-proof manner.
• Legal basis for the processing of personal data
  Art. 6 (1) lit f GDPR. Our legitimate interest consists in complying with tax and commercial law requirements (e.g. sections 146, 147 of the German Tax Code [Abgabenordnung, AO]).
• Purpose of data processing
  The purpose of archiving is to comply with tax and commercial law requirements (e.g. sections 146, 147 of the German Tax Code [Abgabenordnung, AO]).
• Data retention period
  E-mail communication is archived until the expiry of the applicable retention periods under tax and commercial law. The storage period can be up to 10 years.
• Objection and deletion option
  If you have any questions regarding our e-mail archiving system, please contact our Data Protection Officer. We would also like to point out that we only read application documents sent to us in PDF file format. Zipped (WinZip, WinRAR, 7Zip, etc.) files are blocked by our security systems and not delivered. Applications in Word file format and other file formats will not be opened and deleted without being read. Please note that there is the possibility that unencrypted application documents sent by e-mail may be opened by third parties before reaching our IT systems. We will assume that unencrypted application e-mails may also be replied to without using encryption. If you prefer otherwise, please let us know in your application mail.

Withdrawal of consent – data information and change requests – deletion and blocking of data

You have the right to obtain free information concerning the data stored about you once a year. You can request the correction, blocking or deletion of your data at any time. Your data will be deleted by us on first request, unless prohibited by statutory regulations. You can withdraw your consent provided to us concerning the use of your personal data at any time. Please feel free to send any information, deletion and correction requests concerning your data as well as any suggestions you may have to the following address at any time:

Tenuta Le Case Nuove Castiglioncello
Maria Stella Diana
Via Lungomonte, 29
57016 Castiglioncello
Italy

Phone: +49 69 2578 2668
E-Mail: info@tenuta-lecasenuove-castiglioncello.com

Right to lodge a complaint with a supervisory authority according to Art. 77 I GDPR

If you consider that the processing of data relating to you is against the law, you are free to bring about a judicial clarification of the problem at any time. Irrespective thereof, you have the option of contacting a supervisory authority. The right to lodge a complaint is available to you in the EU member state of your residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority you would like to contact accordingly. The supervisory authority with which a complaint has been lodged will then inform you of the status and results of your petition, including the right to an effective judicial remedy according to Art. 78 GDPR.

Controller within the meaning of Art. 4 para. 7 GDPR

The controller within the meaning of the GDPR and other applicable data protection laws of the member states as well as other data protection regulations is:

Tenuta Le Case Nuove Castiglioncello
Maria Stella Diana
Via Lungomonte, 29
57016 Castiglioncello
Italy

Phone: +49 69 2578 2668
E-Mail: info@tenuta-lecasenuove-castiglioncello.com