Privacy Policy

This Website collects some Personal Data from its Users.

This page describes how the Site www.casadelfauno.it is managed, with reference to the processing of Personal Data of Users who consult it.

Legal References

This Privacy Policy is drafted on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.

This Privacy Policy refers exclusively to this Site, unless otherwise specified.

Data Controller

Tipperary S.r.l. Via delle Corolle, 14 – 53045 Montepulciano Italy
Personal Data Protection Officer (DPO): Ezio Romani
Owner’s email address: info@casadelfauno.it.

Types of Data collected

Among the Data that this Website may collect there are: First Name, Last Name, Phone Number, Email, various types of Data, Cookie, Browsing and usage Data.
Other Personal Data collected may be highlighted by other sections of this Privacy Policy or by dedicated explanation text, in the moment when the Data collection happens.
The Personal Data may be freely inserted by the User or the Data Subject, or collected automatically when using the Website.
Unless otherwise specified, all the Data requested by this Site are mandatory.
Failure to provide certain Personal Data, in particular Navigation Data, by deactivating the Application’s Cookies may make it impossible to surf or for the Website to provide its services.
The possible use of Cookies – or other tracking tools – by this Website or third party service providers used by this Website, unless otherwise specified, is used to identify the User and record the related preferences for purposes strictly linked to the provision of the service requested by the User.
The User assumes responsibility for the Personal Data of third parties published or shared through the Website and declares that (s)he has the right to communicate or broadcast them, thus relieving the Owner of all responsibility towards third parties.

Mode and place of processing the Data obtained

Processing methods
The Data Controller processes Users’ Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out by means of computer and/or telematic tools, with organizational methods and criteria strictly related to the specified purposes. In addition to the Data Controller, in some cases, other parties involved in the structuring of this Site (administrative staff, system administrators, commercial marketing, legal, ) or external parties (such as hosting providers, IT companies, communication agencies, third party technical service providers, postal couriers) also appointed, if appropriate, Data Processors by the Data Controller may have access to the Data. The updated list of the Processors may be requested at any time from the Data Controller.

Legal basis for processing
The Owner processes the User’s Personal Data when one of the following conditions is in place:

  • the User has given his consent for one or more specific purposes (contact form, comment form, newsletter subscription form, etc.);
  • the processing is due for the execution of a contract with the User and / or the execution of pre-contractual measures;
  • the treatment is due to satisfy a legal obligation to which the Data Controller is subject;
  • the processing is due for the implementation of a duty of public interest or for the management of public powers vested in the owner;
  • the processing is due for the pursuit of a legitimate interest of the owner or third parties.

However, the User can always ask the Data Controller to explain the precise legal basis for any necessary processing and especially to explain in detail what is the manner in which the processing is required (by law, expected or essential to conclude a contract).

Place of storage
The Data are processed at the operational offices of the Data Controller. Further information can be obtained by contacting the Data Controller.
The User may request information, by contacting the Data Controller, on the legal basis for the transfer of Data outside the European Union or to an international organization; the User may also request information on the security measures put in place by the Data Controller to protect the Data.

Retention Times
Data is processed for as long as necessary to perform the service requested by the User, or required by the purposes described in this document, and the User may always request the interruption of the Processing or the deletion of the Data.
At the end of the aforementioned retention period, Personal Data will be deleted.

Siteground Web Hosting
Infrastructure Security
Siteground is committed to ensuring the maximum security of its infrastructure, in particular by implementing an information systems security policy and meeting the requirements of numerous laws and certifications (PCI-DSS, ISO/IEC 27001 and SOC 1 type II and SOC 2 type II certificates, etc…).
Website: https://www.siteground.com

Purposes of the processing of collected data

The User Data is collected to allow the Website to provide its Services, as well as for the following purposes: contact the User, allow the User to access accounts on third-party services, allow the User to interact with social networks and with platforms outside the Website, allow statistical analysis of visits to the Website.

Detailed information on the processing of Personal Data

Personal Data are collected for the following purposes and using the following services:

Access to accounts on third-party services
This type of service allows this Site to take Data from the User’s accounts on third-party services and perform actions with them.
These services are not activated automatically, but require the express permission of the User.

Facebook Permissions Required by this Site
This Site may require certain Facebook permissions that allow it to perform actions with User’s Facebook account and collect information, including Personal Data, from it. This service allows this Site to connect with the User’s account on the social network Facebook, provided by Facebook Inc.
For more information about the permissions below, please refer to the Facebook permissions documentation and Facebook‘s privacy policy.

The required permissions are:

  • Basic information: the basic information of the User registered on Facebook which normally include the following Data: id, name, image, gender and language of localization and, in some cases, the “Friends” of Facebook. If the User has publicly made additional Data available, the same will be available;
  • Sharing: sharing in place of the User;
  • Insight: provides access to Insight data for pages, applications and domains that the user owns;
  • Like: provides access to the list of all pages that the user has marked with the Like;
  • Post: provides access to posts contained in the User timeline;
  • Facebook Comments: Allows the User to leave their comments and share them within the Facebook platform.

Access to Twitter account
This Site may require you to connect with the User’s account on the social network Twitter, provided by Twitter Inc.
Personal Data collected: various types.
For more information you may refer to Twitter’s Privacy Policy.

LinkedIn Account Login
This Site may require you to connect with your LinkedIn social network account.
Personal Data Collected: various types.
For more information, you may refer to LinkedIn’s Privacy Policy.

Interaction with social networks and external platforms
This Site may allow you to engage in interactions with social networks, or other external platforms, directly from its pages.
Interactions and information acquired in the course of interactions with social networks from this Site are subject to the User’s privacy settings related to each social network.

+1 Button and Google+ Social Widgets
The +1 button and Google+ widgets are services for interaction with the Google+ social network, provided by Google Inc.
Personal Data Collected: Cookies and Usage Data.
For more information, the User may refer to Google’s Privacy Policy.

Facebook Like Button and Social Widgets
The Facebook “Like” button and widgets are services for interaction with the social network Facebook, provided by Facebook, Inc.
Personal Data Collected: Cookies and Usage Data.
For more information, the User may refer to Facebook’s Privacy Policy.

Tweet Button and Twitter Social Widgets
The Tweet Button and Twitter Social Widgets are services for interaction with the social network Twitter, provided by Twitter, Inc.
Personal Data Collected: Cookies and Usage Data.
For more information, the User may refer to Twitter’s Privacy Policy.

Instagram Widgets
Instagram widgets are interaction services with the Instagram social network operated by Instagram, Inc.
Personal Data Collected: Cookies and Usage Data.
For more information, the User may refer to Instagram’s Privacy Policy.

YouTube Social Button and Widgets
The YouTube button and widgets are services for interacting with the YouTube social network, provided by Google Inc.
Personal Data Collected: Usage Data.
For more information, the User may refer to Google’s Privacy Policy.

Viewing content from external platforms
This site may allow you to view content hosted on external platforms and interact with it.

YouTube Video Widget
This site may display within its pages video content from YouTube, a service operated by Google Inc.
Personal Data Collected: Cookies and Usage Data.
For more information, the user can refer to Google’s Privacy Policy.

Remarketing and Behavioral Targeting
These services allow this Site and its partners to communicate, optimize, and serve advertisements based on your past use of this Site.
This activity is performed by tracking Usage Data and using Cookies, information that is transferred to the partners to which the remarketing and behavioral targeting activity is linked.

Contact the User

Contact Form (this Site)
By filling out the contact form with your Data, you consent to their use to enable this Site to respond to requests made by you relating to information, quotes, or any other purpose indicated in the form.
Personal Data collected: last name, email, first name, telephone number, and various types of Data.

Contact Management and Message Sending
This type of services allows you to manage a database of e-mail contacts, telephone contacts or any other type of contact indicated in the form; the aforementioned data will be used to maintain communications with the User.

MailChimp (The Rocket Science Group, LLC.)
MailChimp is an email address management and newsletter sending platform provided by The Rocket Science Group, LLC.
Personal Data Collected: email, first name, last name, location, year of birth, profession.
For more information you may refer to MailChimp’s Privacy Policy.

Statistics
The services of analyzing statistics related to visits to a website and its pages allow the Data Controller to monitor and analyze traffic data; the aforementioned services also allow tracking of User behavior.

Google Analytics
Google Analytics is a service for analyzing statistics about visits to a website provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purposes of tracking and analyzing your use of this Site, compiling reports, and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize ads in its advertising network.
Personal Data collected: Cookies and Usage Data.
For more information, you may refer to Google’s Privacy Policy andOpt Out.

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User can:

  • withdraw consent to the processing of their Personal Data previously expressed;
  • oppose the processing of personal data when it occurs on a legal basis other than that relating to the express consent;
  • obtain information on the Data processed by the Data Controller, obtain information on certain aspects of the processing, receive a copy of the Data processed;
  • check the correctness of the data, request the update, ask for the correction;
  • request the limitation of the processing of its data, if certain conditions occur;
  • request cancellation of its Data by the Data Controller, if certain conditions occur;
  • receive their data and, when technically feasible, have them transferred to another holder (applicable only in cases where the data are processed with automated tools with the consent of the User);
  • propose a complaint to the competent Personal Data Protection Authority or act in court.

Right of objection
Users have the right to object to the processing of Personal Data on grounds relating to their particular situation, where it is processed in the public interest, in the exercise of public authority vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller.
Where Personal Data is processed for direct marketing purposes, Users may object to its processing without providing the Data Controller with any reasons.

Exercise of Rights
In order to exercise their rights, Users may make a request to the Owner, as per the contact details given in this document. Requests will be processed by the Data Controller as soon as possible, always within one month of the request made by the User.

Additional information about data processing

Defense in Court
The User’s Personal Data may be used by the Data Controller in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Site or related Services by the User.
The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.

Specific Disclosures
Upon the User’s request, in addition to the information contained in this Privacy Policy, this Site may provide the User with additional and contextual disclosures regarding specific Services, or the collection and processing of Personal Data.

System Logs and Maintenance
For operation and maintenance purposes, this Site and any third-party services it uses may collect System Logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Definitions

Personal Data (or Data)
Personal Data are any information that makes a natural person identified or identifiable.

Usage Data
Usage Data are all the information collected automatically through this Site, including information collected by third party applications integrated into the Site, including: IP addresses or domain names of the computers used by the User who connects with this Site, addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the Site, with particular reference to the sequence of pages consulted, the parameters relating to the User’s operating system and computer environment.

User
The User is the one who uses this Site; the User, unless otherwise specified, always coincides with the Interested Party.

Data Subject
The Data Subject is the natural person to whom the Personal Data refers.

Data Processor (or Processor)
The Data Processor is the natural person, legal entity, public administration and any other entity that processes, on behalf of the Controller, personal data as identified in this Privacy Policy.

Data Controller (or Data Controller)
The Data Controller is the natural or legal person, public authority, service or other body that determines the purposes and means of the processing of Personal Data; the Data Controller also determines the means adopted in the processing of Personal Data, including the security measures relating to the operation and use of this Site. The Data Controller corresponds to the Data Controller of this Site, except where otherwise specified.

Site
The Site corresponds to the tool, hardware or software, by means of which Users’ Personal Data are collected and processed.

Service
The Service provided by this Site.

European Union (or EU)
Any reference to the European Union in this Privacy Policy shall be deemed to extend to all current member states of the European Union and the European Economic Area, unless otherwise specified.

Cookies
Cookies are a small portion of data stored within the User’s device.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to its Users on this page, and by ensuring analogous protection of the Personal Information in all cases. Therefore, please consult this page regularly, referring to the date of last modification indicated at the bottom.

Last modified date
January 20, 2025