Privacy policy

The controller of the personal data collected through this website is Azienda Agricola Corte Breda di Libretti Francesco, with registered office at Via Fame 2, 25032 Chiari (BS), VAT number 03666980986.

For any matter relating to the processing of your data you can write to info@cortebreda.it or call +39 030 713650.

Data you provide. When you fill in the contact form you give us your first name and surname, email address, telephone number if you choose to, and the content of your message. You are free not to fill in the fields that are not mandatory.

Data collected automatically. Like every website, our server records in its technical logs your IP address, the date and time of the request, the page requested, and the type of browser and operating system. This data is needed to run the website and to detect abuse or intrusion attempts.

Cookies. The website uses the cookies described in the cookie policy. Non-essential cookies are only set after you have given your consent.

• To reply to your requests sent via the contact form, email or telephone. Legal basis: taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR).
• To manage bookings and stays, when a request becomes a booking. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To comply with legal obligations, for example tax and accounting obligations and the reporting of guest details to the public security authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To ensure the security of the website through server logs and anti-spam systems. Legal basis: the controller's legitimate interest in protecting its systems (Art. 6(1)(f) GDPR).
• To measure use of the website with statistics tools, only if they are enabled and only with your prior consent. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Providing the data marked as mandatory in the contact form is necessary for us to reply to you: without it we are materially unable to get back to you. Providing any other data is optional and has no consequences.

• Messages sent via the contact form: 24 months from the last contact, unless a contractual relationship results from it.
• Data relating to bookings and stays: 10 years, to meet civil-law and tax obligations.
• Technical server logs: 12 months at most, unless needed to investigate criminal offences.
• Cookie consent: 6 months, after which we ask you to make your choice again.

At the end of these periods the data is deleted or irreversibly anonymised.

Your data is processed by the controller's authorised staff and may be disclosed to parties acting as processors under Art. 28 GDPR, appointed by means of a specific contract:

• the hosting and email service provider;
• the online booking system provider, when you use the booking engine;
• the tax and accounting consultant;
• the IT service providers responsible for maintaining the website.

Data may also be disclosed to the public security authorities and the tax authorities where required by law. We do not sell or transfer your data to third parties for commercial purposes.

Data is processed on servers located within the European Union. Should a provider involve a transfer to third countries, this will take place only on the basis of an adequacy decision of the European Commission or of appropriate safeguards pursuant to Articles 45 et seq. of the GDPR, a copy of which you can request by writing to the controller.

At any time you can exercise the rights provided for in Articles 15 to 22 of the GDPR:

• to access your data and obtain a copy of it;
• to request its rectification or updating;
• to request its erasure, where the legal conditions are met;
• to request restriction of processing;
• to object to processing based on legitimate interest;
• to receive your data in a structured, machine-readable format (portability);
• to withdraw the consent you have given, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise them, write to info@cortebreda.it. We will reply without undue delay and in any case within one month of your request.

If you believe that the processing of your data infringes the applicable law, you have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), Piazza Venezia 11, 00187 Roma — www.garanteprivacy.it.

We do not carry out profiling or solely automated decision-making that produces legal effects concerning you.

This website is not intended for children under the age of sixteen and does not knowingly collect their data. If you believe that a minor has provided us with personal data, please let us know and we will delete it.

We may update this policy to reflect changes in legislation or in the services we offer. The version in force is always the one published on this page, with the date of the last update shown at the top.