Privacy Policy Tenuta Suvignano

Who we are

The address of our website is:
The data controller is: Società Agricola Suvignano srl, Strada Monteroni Vescovado, 2759 / E - 53014 - Monteroni d'Arbia (SI) - VAT number 00051010528

What personal data we collect

Visiting and consulting the Site does not generally involve the collection and processing of the user's personal data except for navigation data and cookies as specified below. In addition to the so-called "navigation data", personal data voluntarily provided by the user may be processed when the user interacts with the functionality of the Site or requests to use the services offered on the Site. Such data could consist of an identifier such as name, email, an online identifier or one or more characteristic elements suitable for making the interested party identified or identifiable, depending on the type of information that the same could include in the text of the message with which he decided to interact with us ( hereinafter only "personal data").

The personal data processed through the Site are as follows:

Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties.

Data provided voluntarily by the user

This Privacy Policy is also intended for the processing of data voluntarily provided by you through the Site to obtain information regarding the services provided by the Suvignano Agricultural Company, or when you decide to book a stay, in which case they are requested as data base your name, email address and phone number. We may also ask you for your home address, nationality, payment details, the name of any other people traveling with you and any preferences for your stay. If you want to get in touch with us, or contact us through other means (for example on social media), we will also collect information through these channels. You may be interested in subscribing to our newsletter to receive information on advantageous promotions that we reserve for this channel. In this regard, we invite you not to enter, in the forms contained within the Site, information that may fall within the category of particular categories of personal data (for example, data relating to your health or that of other subjects).

Third party data provided voluntarily by the user

It may be necessary to book a stay for other people traveling with you as well, or to make a reservation on behalf of another person. In these cases, you will also need to provide information about them during the booking process. We want to specify that it is our responsibility to ensure that the people you have provided information about are aware of this, and that they have accepted the ways in which Società Agricola Suvignano uses their information (i.e. as described in this privacy statement). In this sense we specify that if you provide us or otherwise process personal data of third parties in the use of the Site, you guarantee from now - assuming all related responsibility - that this particular hypothesis of treatment is based on the prior acquisition - by you - of the consent of the third party to the processing of information concerning him.

Personal information we receive from other sources

In addition to the information you provide to us directly, we may also receive other information through various sources, for example business partners such as affiliates, independent third party sub-suppliers, which may be combined with that received directly from you. For example, the booking services of Società Agricola Suvignano are available not only on this Site, but are also integrated with the services of affiliated partners that you can find online. When you use these services, you communicate your booking details to our business partners, who then send them to us. 

In addition, we rely on international external providers to manage payments between users and properties: these service providers share information about payments, to help us manage them and take care of your booking, so as to guarantee the best possible experience.

Partner establishments may also share information about you with Società Agricola Suvignano, for example when you have questions about an ongoing booking or in the event of a dispute over a booking.

Data processed in interaction with social networks

Some services allow interaction with social networks or other external platforms. The interactions and information acquired are in any case subject to the User's privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed. As an example:

  • Like button and Facebook social widgets (Facebook)
    The "Like" button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook Inc. Personal data collected: Cookies and navigation and use data. Place of processing: USA – Privacy Policy
  • Tripadvisor social widget button (Tripadvisor)
    Tripadvisor social widgets are interaction services with the web review portal on hotels, B & Bs, restaurants, tourist attractions, controlled by Tripadvisor LLC. Personal data collected: Cookies and navigation and use data. Place of processing: USA – Privacy Policy

Information on the cookies served by the Site is available in the specific section of the Site.

Data subject to special processing

The term "confidential data subject to special treatment" means your information relating to race or ethnic origin, political views, religion or other beliefs, union membership, health, life or sexual orientation, genetic information, criminal background and biometric data used to purposes of unique identification. 

In the interaction with the Site, no information is requested in any way that could lead to the processing of data that fall within the category of special categories of personal data referred to in art. 9 of the Regulations. However, it may be that this data is provided voluntarily by the user. We may use the data you have provided to us about your health to provide you with a better service and to meet your particular needs (for example, by providing special access measures for people with disabilities). They are therefore data whose protection has the purpose of guaranteeing freedom of thought and opinion, the dignity of the person and freedom from possible discrimination, for the treatment of which explicit consent is required, even if not necessarily written, because they concern aspects particularly deprived of the individual and can be used for discriminatory purposes.


The new European Regulation (GDPR) has prescribed, in article 8, the obligation not to allow the direct offer of information society services (therefore registration to social networks and messaging services) to subjects under 16 years of age. , unless the consent of the parents is obtained (it must be ascertained that the consent is given by the person exercising parental authority) or whoever takes his place.

Registration for an online service, therefore, is subject to the rules for the conclusion of contracts, for which the subject must be able to appreciate the nature and consequences of his consent.

In any case, parental consent is not always necessary. According to article 8 of the new European regulation, parental consent is required only if the processing of minors' data is legitimized on the basis of consent. If, on the other hand, the processing has another legal basis, such as compliance with a legal obligation, legitimate interests, etc., parental consent is not necessary.

Our Website does not intend to request or knowingly collect personal data from persons under the age of 16. If we are notified or otherwise discover that a minor's personal data has been incorrectly collected, we will take all commercially reasonable steps to delete that information.

For what purposes we collect the data

Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable: 

  • allow browsing of the Site;
  • find specific requests for information addressed to the Suvignano Agricultural Company and contact it by e-mail, post, telephone or SMS, depending on the contact method you have chosen;
  • manage requests for booking stays, ancillary services both through our online services or through direct contact with the structure or through external business partners;
  • fulfill any obligations established by applicable laws, regulations or community legislation, or satisfy requests from authorities;
  • carry out marketing activities such as:
    • send information and promotional material relating to the activities and services of the Suvignano Agricultural Society and its commercial partners;
    • send personalized offers based on preferences, likes, personalizations or other profiling elements;
    • send surveys to improve the service ("customer satisfaction");
    • newsletters and any other communications.

Such communications may be made via e-mail or text message, via paper mail and / or the use of the telephone with operator and / or through the official pages of the Suvignano Agricultural Society on social networks; it is specified that the Data Controller collects differentiated consents for the marketing purposes described here and for sending newsletters, pursuant to the General Provision of the Guarantor for the Protection of Personal Data "Guidelines on promotional activities and the fight against spam" , of 4 July 2013; if, in any case, you can object to the processing of your data for marketing purposes carried out with the means indicated here, at any time by contacting the Data Controller at the addresses indicated in the "Contacts" section of this policy, without prejudice the lawfulness of the processing based on the consent given before the revocation.

  •  for statistical purposes, without it being possible to trace your identity.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Who we share your data with

Your personal data may be shared with third parties.

These are mainly our service providers and other third parties as detailed below:

  • Electronic billing: If you receive a receipt or invoice by email, a summary of the goods and services provided to you during your stay will be sent to your payment card provider and, if you participate in a corporate billing program and use a card payment card, the payment card provider may pass this summary to your employer. Once we have transferred your information, the privacy policies of your employer, payment card provider and card issuer apply.
  • Group Events or Meetings: If you are attending an event or meeting, the information gathered for the planning of that event or meeting can be shared with the organizers and, if appropriate, with the guests who are organizing or attending the event or meeting.
  • Business Partners: We may work with other companies to provide products, services or offers based on your needs and share your information with our business partners accordingly. For example, we may receive assistance from our business partners for car rental or other services and share your personal information with them to provide the requested services. 
  • Service Providers: We rely on third parties who provide services on our behalf and, if necessary, we may share your personal information with them. These are subjects who typically act as data controllers, namely:
    • persons, companies or professional firms that provide assistance and consultancy to the Suvignano Agricultural Company in tax, accounting, administrative, legal, tax, financial, regulatory compliance matters;
    • subjects delegated to carry out technical maintenance activities.

In general, our service providers undertake by contract through the signing of confidentiality agreements by their staff, to protect your personal information and will not be able to use or share it, unless required by law.

  • We may provide third parties with data that has been aggregated or anonymised. This means that your personal information that could be used to identify you has been removed from the data. The data provided to third parties in this way is not personal data; however, the right to object is retained.
  • Credit institutions or insurance companies and brokers (in the sole event of accidents that may occur in the Suvignano Estate).
  • Persons authorized by the Suvignano Agricultural Company to process personal data, necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality.
    The complete list of data processors is available by sending a written request to the Data Controller at the addresses indicated in the "Contacts" section of this policy.

Other reasons. We may disclose your personal information to:

  • comply with applicable laws;
  • respond to government requests or requests from public authorities;
  • comply with a valid legal procedure;
  • protect the rights, privacy, safety or property of Società Agricola Suvignano, visitors to the Site, guests, employees or the public;
  • enable us to implement available remedies or limit the damage we can sustain;
  • enforce the terms and conditions of our websites;
  • cope with an emergency.

Where we send your data

We store and process your personal data in Italy / EU / European Economic Area ("EEA"). Your data will not be transferred outside the EEA.

Browsing: your browsing data may also be transferred, limited to the purposes indicated above, in the following states: - EU countries - EEA area.

Cookie management: in the event of doubts or concerns regarding the use of cookies, it is always possible to intervene to prevent them from being set and read, by changing the privacy settings within your browser in order to block certain types.

Since each browser, and often different versions of the same browser, also differ significantly from each other, if you prefer to act independently through your browser preferences, you can find detailed information on the necessary procedure in your browser's guide.

Both with regard to the data on their devices and for any data present at the provider, the Data Controller has implemented appropriate technical and organizational measures to ensure an appropriate level of security, in full compliance with the provisions of art. 32 of the EU Regulation.

More information is available by sending a written request to the owner at the addresses indicated in the "Contacts" section of this policy.

How we protect your data

The Suvignano Agricultural Company undertakes to protect the security of the user's personal data and complies with the security provisions of the applicable legislation in order to avoid data loss, illegitimate or illegal use of data and unauthorized access to the same. In addition, the information systems and computer programs used are configured in such a way as to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. The Suvignano Agricultural Society uses multiple advanced security technologies and procedures aimed at promoting the protection of users' personal data; for example, personal data are stored on secure servers located in places with protected and controlled access. The user can help and contribute to updating and keeping their personal data correct by communicating any changes to their contact information.

How long do we keep your data

Personal data processed for the purposes indicated above will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Suvignano Agricultural Company will keep personal data for the period of time envisaged and allowed by Italian law to protect its interests or until your consent is revoked.

It is envisaged that a periodic check will be carried out on an annual basis on the data processed and on the possibility of being able to delete them if no longer necessary for the intended purposes. With reference to the personal data subject to processing for marketing purposes or processing for profiling purposes, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until the revocation of the specific consent by the interested party.

Specifically, the Data Controller will process the data for no more than 5 years from the collection of the data for Marketing Purposes and one year for the data collected for profiling Purposes.

More information about the data retention period and the criteria used to determine this period can be requested by sending a written request to the owner at the addresses indicated in the "Contacts" section of this policy. 

What rights do you have over your data

At any time, the interested party may exercise his rights towards the Data Controller, pursuant to EU Regulation 679/2016 through the contact details indicated in the contact section of the policy.

To ensure the correct exercise of rights, the interested party must make himself unequivocally identifiable.

The Suvignano Agricultural Company undertakes to provide feedback within 30 days and, in the event of inability to meet these deadlines, to justify any extension of the deadlines. The reply will be free of charge except in cases of groundlessness (e.g. there are no data concerning the applicant) or excessive requests (e.g. repetitive over time) for which a fee may be charged not exceeding the costs actually incurred for the research carried out in the specific case. The rights relating to personal data concerning deceased persons can be exercised by those who have an interest of their own or act to protect the person concerned or for family reasons worthy of protection. The interested party can also lodge a complaint with the supervisory authority.

In case of violation of personal data suffered by the Suvignano Agricultural Company, the owner will proceed to notify the violation to the competent supervisory authority within 72 hours of the occurrence and will also communicate the event to the interested party, except for the cases of exclusion provided for by the law.

Rights of the interested party:

  • request confirmation of the existence of personal data concerning him (right of access of the interested party - Article 15 of Regulation 679/2016);
  • know its origin;
  • receive intelligible communication;
  • have information about the logic, methods and purposes of the processing;
  • request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected (right to rectification and cancellation - articles 16 and 17 of Regulation 679/2016);
  • right of limitation and / or opposition to the processing of data concerning him (Article 18 and Article 21 of Regulation 679/2016);
  • right of revocation;
  • right to data portability (Article 20 of Regulation 679/2016);
  • in cases of consent-based processing, receive their data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
  • the right to lodge a complaint with the Supervisory Authority (right of access by the interested party - Article 15 of Regulation 679/2016).

The Suvignano Agricultural Society declares that the data collected will not be processed beyond the purpose for which they were collected.

The interested party is authorized to withdraw his consent at any time by sending an email to:

Our Site may contain links to third party websites. Please note that we are not responsible for the collection, use, management, sharing or disclosure of data and information by the aforementioned third parties. If you provide information on, and use third-party sites, the privacy policies and terms of use of the service of those sites will apply. We encourage you to read the privacy policies of the websites you visit before submitting any personal information. In some cases, these sites may be co-branded and show our logos or other registered trademarks. To find out if you are on our website, check the URL of the page you are visiting.


When visitors leave comments on the Site, we collect the data shown in the comments form as well as the visitor's IP address and browser user agent string to facilitate spam detection.

An anonymized string created from your email address (otherwise called a hash) can be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After your comment is approved, your profile picture is visible to the public in the context of your comment.


If you upload images to the Website, you should avoid uploading images that include embedded location data (EXIF GPS). Visitors to the Website can download and extract any location data from images on the Website.

Contact form

Our Site uses the Moto Press Hotel Booking plugin to manage online reservations. During the booking process the following data is collected: Name, Surname, email, Telephone number, Country of origin, residential address, any notes, services requested, period and length of stay, price of the requested service. These data are kept for 5 years and can be used with probable marketing purposes. 

If you leave a comment on our Site, you can choose to save your name, email address and Website in cookies. They are used for your convenience so that you do not have to re-enter your details when you leave another comment. These cookies will last for one year.

If you visit the login page, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, several cookies will be set to save your login information and your screen display options. Login cookies last for two days and screen options cookies last for one year. If you select "Remember me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include personal data, but simply indicates the ID of the article just edited. It expires after 1 day.

You can consult the list of cookies used by our Site and their purpose at this link: Cookie Policy 


Our Site uses the Rank Math plugin for SEO management and Google Analytics for traffic data analysis.

By default WordPress does not collect statistical data. However, the Siteground web hosting service collects anonymous statistical data.

Embedded content from other websites

Articles and pages on this Site may include embedded content (e.g. videos, images, articles, etc.). Content embedded from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, integrate further third-party tracking and monitor your interaction with them, including tracking your interaction with the embedded content if you have an account and are logged in to those websites.


The Suvignano Agricultural Company reserves the right to modify or simply update the content of this Privacy Policy, in part or completely, also due to changes in the applicable legislation. The Suvignano Agricultural Company will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. For this reason, we therefore invite you to visit this section regularly to become aware of the most recent and updated version of the Privacy Policy in order to always be updated on the data collected and on the use made of it by the Suvignano Agricultural Society.

Contact info

To exercise the above rights or for any other request, you can write to: 

Società Agricola Suvignano srl 
Strada Monteroni Vescovado, 2759/E
53014 – Monteroni d’Arbia (SI)
VAT number 00051010528
Phone: +39 0577 373181
Tenuta Suvignano website

Dati del Responsabile della Protezione dei dati (DPO):

Luigi Serrao 
Phone: +39 346 21283