Privacy Policy
Last updated: 8 October 2026
This notice explains how we process the personal data of people who visit www.masseriacilentana.it and of people who write to us using the contact form, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”). The Italian version of this notice prevails in the event of any discrepancy.
1. Data controller
Società Agricola Masseria Cilentana S.S.
Registered office (sede legale): Via C. Battisti – Eredita, 84061 Ogliastro Cilento (SA) – Italy
Farm (sede operativa): Via Malagenia 61, 84043 Agropoli (SA)
C.F. 93031080653 – P.IVA (VAT) 05541290655
Email: [EMAIL]
We have not appointed a Data Protection Officer, as this is not required for our activities.
2. What data we process
a) Data you give us through the contact form
Your name, email address, the content of your message and the date and time it was sent. Please do not include unnecessary information in your message — especially health data or other special categories of data (Art. 9 GDPR).
b) Browsing data
Our hosting provider's systems automatically record certain data in technical logs, such as IP address, browser type, date and time of the request and the page visited. This is used only to run the site and protect it from abuse.
This site does not use analytics tools, profiling cookies, advertising pixels or embedded third-party content (fonts are hosted on our own server; the map is a static image). See the Cookie Policy for details.
3. Purposes and legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your enquiries (information, visits, products) | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying (Art. 6(1)(f)) | As long as needed to handle your enquiry, and no longer than [12 months] after the last contact |
| Website security and technical operation | Legitimate interest (Art. 6(1)(f) GDPR) | According to the hosting provider's technical retention periods [TO BE CONFIRMED] |
| Compliance with legal obligations; establishing, exercising or defending legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) | As required by law or as needed to protect our rights |
If your enquiry leads to a business relationship, your data will be processed under a separate, specific notice.
4. Is providing data mandatory?
Using the form is entirely optional, but we cannot reply without your name, email and message. The privacy checkbox simply confirms you have read this notice; it is not a request for consent.
5. How we process data
We process data electronically, with appropriate technical and organisational measures (Art. 32 GDPR): encrypted HTTPS connections, access limited to authorised staff, and regular deletion of messages we no longer need. We carry out no profiling and no automated decision-making.
6. Who we share data with
Data is processed by authorised members of our staff and, on our behalf, by providers appointed as data processors (Art. 28 GDPR):
- Netlify, Inc. — website hosting and receipt of messages sent through the form;
- [FORNITORE EMAIL] — the mailbox we use to reply to you.
Your data is never published, sold or passed to third parties for marketing.
7. Transfers outside the European Union
Netlify, Inc. is based in the United States. Transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for certified providers, and/or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR).
8. Your rights
You may exercise your rights under Articles 15–22 GDPR at any time:
- access to your data and to information about how it is processed (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure (“right to be forgotten”, Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- not to be subject to decisions based solely on automated processing (Art. 22) — which we do not carry out.
To exercise them, write to [EMAIL]. We will reply without undue delay and in any case within one month (Art. 12 GDPR).
9. Complaints
If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Art. 77 GDPR), Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it — or with the supervisory authority of your EU country of residence, or bring the matter before a court.
10. Children
The contact form is not intended for children under 14 (Art. 2-quinquies, Italian Privacy Code). If we receive data from a child without the consent of a parent or guardian, we delete it.
11. Changes
We may update this notice, for example if the services used by the site change. The date of the latest update is shown at the top of this page.