This notice explains how we process the personal data of visitors to the Tenuta Badia website and of people who contact us or begin a booking. Last updated: 29 September 2026.
1. Data controller and contact details
Data controller: Tenuta Badia ’99 società agricola a r.l., Via degli Etruschi 39, 06060 Paciano (PG), Italy, VAT no. 02401710542. For information and requests concerning personal data, contact info@vacanzeideali.it.
The Vacanze Ideali brand identifies the property and the domain. To exercise your data protection rights, you can write to info@vacanzeideali.it.
2. Scope of this notice
This notice covers browsing the Tenuta Badia website, requests for information and quotes, links to the booking system, and digital services actually enabled. Notices concerning obligations connected with a stay and services managed by third parties should be read alongside this page.
3. Data we process
The Contact form requires first name, surname, email address, arrival and departure dates, and number of adults. Telephone number, number of children, and message are optional. You may state children’s ages in the message if needed for a quote. Do not send identity documents, payment details, or health information through this form.
Browsing may involve the processing of technical data such as IP address, server requests, and device information. Cookies, identifiers, and interaction data depend on the features actually loaded and the preferences you express.
4. Purposes and legal bases
Information, quotes and booking enquiries: handling your request and taking steps before entering into a contract under Article 6(1)(b) GDPR. Acknowledging this notice in the form does not amount to consenting to advertising.
Bookings, managing the relationship and legal obligations: performance of a contract and compliance with legal obligations, according to the processing actually carried out (Article 6(1)(b) and (c) GDPR).
Security and operation: preventing abuse and protecting the website on the basis of legitimate interests, subject to an assessment of necessity, proportionality and balancing of interests. Technical data includes access and security logs; technical logs are managed as part of the hosting service supplied by VHosting Solution.
Optional analytics and marketing through tracking tools: consent, with separate categories in the preference manager. Under the planned setup, Google Analytics 4 and Meta Pixel must remain blocked until the relevant consent has been given. The quote form does not automatically subscribe you to a newsletter.
5. Providing data
Required fields are necessary to handle your request through the form. Alternatively, you can contact the property using the published contact details. Refusing optional tracking must not prevent you from sending an enquiry or accessing essential content.
6. Recipients and services used
Data may be accessed by authorised staff and suppliers involved in operating the website, email and bookings, only insofar as necessary for their services and according to their respective data protection roles.
Identified providers: VHosting Solution S.r.l. provides website hosting and email; QNT S.r.l. provides the SimpleBooking booking system, which you access when you begin a booking. The website uses WordPress, Elementor and WPML, the Complianz consent manager and, where present, Google Maps and review content. Cookie categories and external services loaded on the website are detailed in the Cookie Policy.
Google Analytics 4: a planned analytics tool that is not yet active on the new website. If enabled, it will load only after consent to analytics and will be described with its retention and sharing settings.
Meta Pixel: if you consent to marketing cookies, this tool helps measure visits and interactions with the website and campaigns. Planned events concern page views, searches, contact actions and opening the booking engine; completion of a booking is not detected by the WordPress website. The content of a contact request is not sent in the event text.
Google Search Console: a tool for managing the website’s presence in search results, separate from Google Analytics. Property verification through DNS or an HTML file does not add a tracking pixel for visitors.
WhatsApp and social links open external services, which are also governed by their own privacy notices. The Contact form does not ask for credentials for those services.
7. Transfers outside the European Economic Area
Use of Google, Meta, maps, reviews and booking services may involve access from or transfers to countries outside the European Economic Area. Where such transfers occur, safeguards required by the GDPR are used according to the terms applicable to each provider, including adequacy decisions or standard contractual clauses. The individual service providers’ notices contain further details.
8. Retention
For information or quote requests that do not lead to a booking, there is no statutory minimum retention period: data is used to handle the request and any follow-up, and deleted within 90 days after the exchange ends, unless it needs to be retained for a specific dispute. Submissions, if stored in WordPress, and related emails follow the same rule. Data relating to bookings and contractual relationships is retained for the time needed to provide the service and meet applicable obligations; invoices and accounting records are kept for 10 years from the last entry under Article 2220 of the Italian Civil Code. Security logs and backups are kept in technical cycles proportionate to security and recovery needs, to be aligned with VHosting service settings. Consent choices are recorded by Complianz to document and manage preferences; Google Analytics data will be governed before any activation.
9. Your rights
Where and to the extent provided by the GDPR, you may request access, rectification, erasure, restriction, portability and objection to processing, and withdraw consent without affecting the lawfulness of earlier processing. Send requests to info@vacanzeideali.it. You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
10. Cookies, preferences and updates
The Cookie Policy describes tracking tools, their purposes and duration. The preference panel lets you change or withdraw your choices at any time. Optional analytics and marketing cookies are activated only after consent to the relevant category.
This information may be updated if the services used or the law change; the date of the latest revision appears at the beginning of the page.
