Privacy Policy



Regulation EU 2016/679 applies to the processing of personal data, and the free circulation of such data, wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system (Art 2). Personal data shall be (Art 5): 1) Processed lawfully, fairly and in a transparent manner; 2) Collected for specific, explicit and legitimate purposes; 3) Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; 4) Accurate, up to date and easily erased or rectified; 5) Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; 6) Processed in a manner that ensures appropriate security of the personal data, using appropriate technical or organisational measures. 7) To this end, the Regulation requires that the present information document is made available by this company to the interested party.

Source and nature of personal data

Data collected from the website relate to natural persons, companies and commercial activities: name and surname, date of birth, contact details including residential address, telephone, fax, email, tax information, business name, head office address, business operations address, personal tax number and VAT number, etc. In accordance with articles 13 and 14 of the cited regulation, we inform you that the personal data supplied by you will be processed by the VILLA VIGNAMAGGIO SRL company, for the purposes outlined in point 3. Purposes of data processing The purposes of the processing of your personal data are as follows: to meet with the obligation contained in art. 109 of T.U.P.S. (R.D. n. 773/1931); to comply with administrative, financial and fiscal obligations in effect; be able to perform the function of receiving messages and telephone calls for your attention; to facilitate sales marketing and communication by means of automated systems with reference to goods and services purchased.

Duration of processing

Personal data relative to the purposes outlined in point 2, will be retained by the enterprise VILLA VIGNAMAGGIO SRL in accordance with the Regulation, only for the duration necessary for the execution of all services offered, except in the case of legal requirements such as fiscal, budgetary, social security, public safety and/ or others.

Nature of provision of the requested data

The provision of data for processing is compulsory for purposes 1-2 as set out in article 3, in order to fulfil all legal obligations inherent in this working relationship and for all other intentions and purposes of laws, regulations and community legislation. Refusal to provide this information to personnel employed by the Data Controller will prevent the same to comply with the rules set out in no. 12 to 23 of Regulation EU 2016/679 and consequently prevent the provision by the same of the goods or services you expect. Consent to data processing is necessary for the purposes of points 3-4. Communication of information for the purposes of point 4 will be completed electronically. Rights of the Interested Party Regarding the processing of your personal data, you have the right, in accordance with the above art 12-23 of the Regulation, to request from the data controller, immediate access to your data, to affect changes or to cancel or limit the processing of the same. You may also, in the same way, exercise your right to move your data to another Data Processor or to oppose the processing of your data, as well as to revoke consent to the processing of such data without prejudice to the legality of the processing based on consent acquired before revocation. Data Processing methods The above-mentioned rights can be exercised in writing, by email to the Data Controller at or by registered letter to VILLA VIGNAMAGGIO SRL, Via Petriolo, 5, 50122 Greve in Chianti. Data will be collected and archived for the sole purposes stated above using hard copy, electronic and telematic means and by other suitable means to fulfill the obligations listed above and designed to guarantee integrity, security and privacy in accordance with the provisions set forth in the Regulation and other current laws. Your data will be processed in accordance with article 5 of the regulation, as stated in point 1 of this information document, allowing access only to persons designated responsible for processing of personal data. Data may also be communicated to or collected from third parties (as in the purchase of data-by-data processing centres or by other companies) These entities will accordingly be designated as personal data processors and will be responsible for conforming with all legal obligations in place or by certain specific legal requirements (eg suppliers, consultants, etc).

Communication of data

Your data will not be disseminated by the enterprise VILLA VIGNAMAGGIO SRL in the operation of its activities, nor will it be communicated to third parties, however the personnel of Vignamaggio SRL and the stores and hoteliers affiliated to Vignamaggio may have access to it [Villa Sangiovese, Villa Vitigliano, Petriolo] for the same purposes for which the information was collected by VILLA VIGNAMAGGIO SRL.

Data Processor

Data Processor is enterprise VILLA VIGNAMAGGIO SRL, with head office in Greve in Chianti, Via Petriolo, 5. Data Controller is Mrs Silvia Falsina.

Use of cookies

Collection of data in aggregated form is automated and relates to navigation on the pages of the site. If this is not desired, it is necessary to terminate navigation on the site itself. Data collected (country of origin, details of pages visited and length of time spent on such pages) will be used in the development of marketing strategies and statistical research.


Regulation (EU) 2016/679 of the European Parliament and of the Council

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27-4-2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The aim of the Regulation is the protection of natural persons with regards to the processing of personal data, as well as the laws relating to the free circulation of such data.

The Regulation, in effect as of 25 May 2018, replaces previous Legislative Decree of 30/06/2003 no. 196 “Code for the protection of personal information”.

The European Union Directive 25-11-2009 No 136, amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services of the Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws

L.R. no. 86 of 20-12-2016 Consolidated Regional Tourism Code