Privacy and Cookie Policy

Data Subjects: Visitors to the website of Casale la Poiana

Data Controller:
Matteo Caprili – Via Casanova di Balbano n. 940, Lucca, Italy – Tel. +39 348 887 9020
CIN IT046017B48J6VD59I

Pursuant to Regulation (EU) 2016/679 (GDPR), Matteo Caprili, as the data controller of the personal data collected through the website
https://casalelapoiana.it, informs users about the methods of managing personal data.

Purpose of Data Processing


The processing of personal data will take place in accordance with the principles of lawfulness, correctness, transparency, and protection of confidentiality.
The data collected through the website will be processed solely for the following purposes:

  • Responding to information requests;
  • Managing Bookings and Guest Enquiries;
  • Anonymous statistical analysis of website traffic and usage;
  • Publishing Multimedia Content Related to Events Organized at Casale La Poiana.

Types of Data Processed


1. Browsing Data and Cookies

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission
is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, etc.). These data are used solely for anonymous statistical information and to check the proper functioning of the website.

The website uses technical cookies and, with prior consent, third-party analytical cookies.

2. Data Voluntarily Provided by the User

The voluntary, explicit, and optional sending of messages to the email addresses indicated on the website entails the acquisition of the sender’s address, as well as any other personal data included in the message.

The website may provide online forms for requesting information or booking stays. Data collected (name, surname, email, phone number, etc.) will be processed solely for the specific purpose indicated in the form.

Legal Basis for Data Processing


The processing of personal data is based on:

  • The consent of the data subject for optional purposes (e.g., newsletter subscription, publication of images);
  • The execution of pre-contractual measures upon request of the data subject (e.g., responding to contact requests);
  • Legal obligations, where applicable.

Data Processing Methods and Security Measures


Data will be processed by authorized personnel, using electronic and/or paper tools, adopting technical and organizational measures suitable to ensure a level of security appropriate to the risks.

Data Communication and Transfer


The data will not be disclosed. They may be communicated to external parties involved in the technical management of the website or in managing bookings
solely for the purposes mentioned above and always in compliance with the GDPR.

Data transfer outside the European Union is not foreseen.

Data Retention


Data will be retained for the time strictly necessary to achieve the purposes for which they were collected or until the consent of the data subject is withdrawn.

Data Subject Rights


At any time, the data subject may exercise the rights provided for in Articles 12-23 of Regulation (EU) 2016/679, including:

  • Access to personal data;
  • Rectification or deletion of data;
  • Restriction of processing;
  • Objection to processing;
  • Withdrawal of consent;
  • Filing a complaint with the Data Protection Authority.

Requests should be addressed to the Data Controller through the following link:
Contact Form.

Updates to this Policy


This policy may be updated at any time. Users are invited to regularly consult this page to view any changes.

Last updated: May 17, 2025