Pursuant to Article 13 of EU Regulation 2016/679 (General Data Protection Regulation, hereinafter “GDPR”), we inform you that, for the purposes detailed below, this company needs to process certain personal data. Data processing is carried out in accordance with the following conditions.

Data Controller and Data Protection Officer (DPO)

The data controller is La Collina di Montegrappa, located at Corso Cesare Vergine, 52A – 73058 Tuglie – VAT No. 02029960735; email:

The Data Protection Officer (DPO) can be contacted via email at:

Purpose of Data Processing

Data is processed for the following purpose:

a) Direct marketing activities by La Collina di Montegrappa: Subject to your explicit consent, your personal data may be processed for purposes such as: conducting statistical analyses and market research; assessing customer satisfaction; sending informational, promotional, and advertising materials via mail, email, SMS, MMS, or other communication channels. The legal basis for this processing is your consent to one or more specific purposes.

Processing activities, as defined by Article 4(1) of the GDPR, are carried out using both electronic and paper-based tools. Your data will be stored in electronic archives and databases within the facilities of La Collina di Montegrappa and protected against unauthorized access or alteration through appropriate security, management, and storage systems. Data will only be accessed by authorized personnel, within the scope of their duties, and handled in compliance with current regulations. Processing may be carried out by the Data Controller, external data processors, or internally appointed staff as necessary to fulfill legal obligations or your requests.

Nature of Data Provision and Consequences of Refusal

Providing your personal data for the purposes outlined in Section 2(a) is optional. However, failure to provide such data may prevent the Controller from carrying out the related activities.

Transfer of Personal Data Outside the EU

Your personal data will not be transferred to countries outside the European Union.

Data Disclosure and Distribution

Personal data held by La Collina di Montegrappa may be disclosed to public authorities or entities when required by law, regulations, or EU legislation. Your personal data may also be disclosed to individuals or legal entities as necessary to ensure proper performance of the processing activities outlined above. Your data will not be publicly disseminated.

Data Retention Period

Your data will be retained by the company as follows:

• For the purpose under Section 2(a), data will be stored until you request its deletion.

Data Subject Rights

Regarding the data processing described in Section 2, you are entitled to exercise the rights established under Articles 15 and following of the GDPR, including:

• Access: Obtain confirmation as to whether or not personal data concerning you exists, and receive information about its source, logic, and processing purposes, as well as the recipients or categories of recipients and the retention period (if determinable);

• Rectification: Correct inaccurate personal data;

• Erasure (Right to be Forgotten): Request deletion when the data is no longer necessary for the purposes it was collected, or if consent is withdrawn in accordance with Article 7(3) of the GDPR (where applicable), and no other legal basis for processing exists;

• Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller. This applies only to data processed with your consent and provided directly by you, and not to non-automated data processing (e.g., paper archives);

• Objection: Object at any time to the processing of your data, including for marketing purposes or specific communication methods (e.g., opt-out from emails while still receiving phone calls). To exercise this right, simply send an email at any time to or the DPO at the same address. You may also contact the Controller using publicly available contact methods. Each communication will remind you of your right to object. The objection process is simple and free;

• Lodge a Complaint: Submit a complaint to the Italian Data Protection Authority, pursuant to Article 77 of the GDPR.

To exercise any of these rights, you may contact the Data Controller or the Data Protection Officer at the contact details provided above.