This policy explains how the personal data of users visiting tenutaronzano.it and its subdomains (the “Website”) are processed. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian data protection law.
1. Data controller
Tenuta Ronzano di Ronzano Marco, registered office Via Asti Nizza 111, 14055 Costigliole d'Asti (AT), Italy, VAT no. 01611270057, tax code RNZMRC92A08A124Q, email info@tenutaronzano.it (“Controller”).
2. Data processed
- Browsing data: technical data collected automatically while using the Website, such as IP address, browser and device type, pages visited.
- Data provided by the user: data entered in the contact, booking and newsletter forms, such as first name, last name, email, phone number and any notes. Please do not enter health data in the notes.
- Payment data: payments are handled by external platforms. The Controller does not receive or store full card details.
- Cookies and tracking tools: see section 5 and the Cookie policy.
3. Purposes and legal bases
Data are processed to:
- provide the requested services (replying to requests, managing bookings and payments): the legal basis is the performance of pre-contractual measures or of the contract (Art. 6(1)(b) GDPR);
- comply with legal obligations, including tax and accounting obligations (Art. 6(1)(c));
- ensure the operation and security of the Website, protect forms from spam, show the Estate’s location on a map and defend the Controller’s rights: the legal basis is the Controller’s legitimate interest (Art. 6(1)(f));
- send the newsletter, produce statistics, show personalised advertising and display third-party content such as videos: the legal basis is the user’s consent (Art. 6(1)(a)), which can be withdrawn at any time.
Providing the data needed for the requested services is required to deliver them; all other consents are optional. No decisions based solely on automated processing producing legal effects on the user are taken.
4. Retention
Data are kept for as long as needed to achieve the purposes for which they were collected and, where applicable, for the period required by tax law or to protect the Controller’s rights. Data processed on the basis of consent are kept until consent is withdrawn. Cookie durations are set out in the Cookie policy.
5. Cookies and Google advertising features
The Website uses technical cookies and, only with consent given through the banner, analytics, marketing and third-party cookies. Choices can be changed at any time via the cookie preferences button. Details are in the Cookie policy.
The Website uses Google Analytics 4 with advertising features enabled, including Google Signals, demographics and interests reports and integration with Google Ads. The Controller and Google use first-party and third-party cookies together to measure campaign effectiveness and show personalised ads, including across devices for users signed in to a Google account. These features are active only with consent to marketing cookies.
Users can opt out via the Website’s cookie preferences, Google’s My Ad Center or the Google Analytics Opt-out Browser Add-on. Google’s privacy policy: policies.google.com/privacy.
6. Recipients
Data are processed by persons authorised by the Controller and may be disclosed to the following categories of recipients, acting as processors or independent controllers:
- technical and IT service providers (hosting, development and maintenance of the Website);
- online payment providers;
- email marketing service providers;
- Google, for analytics, advertising, maps and video services;
- professionals and advisers;
- competent authorities, on request.
Data are not made public.
7. Transfers outside the EU
Some providers may transfer data to the United States. Transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework or, failing that, on the Standard Contractual Clauses approved by the Commission.
8. Data subject rights
Users may at any time request access to their data, rectification, erasure, restriction of processing and portability, object to processing and withdraw consent, without affecting the lawfulness of prior processing (Articles 15–22 GDPR). Requests should be sent by email to info@tenutaronzano.it or by registered letter to Tenuta Ronzano di Ronzano Marco, Via Asti Nizza 111, 14055 Costigliole d'Asti (AT), Italy.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
9. Changes
The Controller may update this policy. Changes are published on this page.
Last updated: 30/09/2026