Privacy Policy

Data controller

The data controller is Rocca d'Italia S.r.l., Strada di Castellina in Chianti 28, 53100 Siena (SI), Italy, VAT no. 01613940525.

For any request regarding the processing of your data, you can write to amministrazione@roccaditalia.it.

What data we collect

We only process the data you voluntarily provide by filling in the site's forms, together with the technical browsing data required for the site to function.

• Identity and contact data: first name, last name, email address, phone number.
• Request details: experience or event of interest, number of participants, preferred dates, messages and notes.
• Any uploaded files: CV (job applications), photographs of a vehicle (car exhibitor application), photographs (photo contest).
• Browsing data: IP address, browser type and server logs, collected automatically by the hosting provider for technical and security purposes.

Why we process data and on what legal basis

• To respond to information, contact and booking requests (performance of pre-contractual and contractual measures — Art. 6.1.b GDPR).
• To manage job applications and event applications (pre-contractual measures and, where applicable, consent — Art. 6.1.b and 6.1.a).
• To manage participation in contests and initiatives, according to the relevant rules.
• To comply with legal, accounting and tax obligations (Art. 6.1.c).
• To send promotional communications, only with your free and revocable consent (Art. 6.1.a).

Who we share data with

We do not sell or transfer your data to third parties for marketing purposes. Data may be processed on our behalf, as data processors, by the technology providers that enable us to deliver the service:

• Vercel Inc. — website hosting and storage of uploaded files;
• Resend (Plus Five Five, Inc.) — sending internal notification and confirmation emails;
• Google Ireland Ltd. — spreadsheets used to manage Giardino dell'Eden bookings.

Some of these providers may process data outside the European Union: in that case the transfer takes place on the basis of appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

How long we keep data

We keep data for the time strictly necessary to handle your request and the purposes above, and in any case within the terms required by law (for example for accounting and tax obligations). Data processed on the basis of consent is kept until consent is withdrawn.

Your rights

As a data subject, you may exercise at any time the rights set out in Articles 15-22 of the GDPR:

• access to your data and its rectification or update;
• erasure of data and restriction of processing;
• data portability;
• objection to processing and withdrawal of consent, at any time.

To exercise your rights, write to amministrazione@roccaditalia.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The site uses only technical cookies necessary for its operation. For details, see the Cookie Policy.

Changes to this notice

We reserve the right to update this notice. The updated version will always be published on this page with the relevant last-updated date.