1. Data Controller
The Data Controller of personal data collected through this website is:
LA DEBBIA RANCH DI MONTEFIORI FRANCESCA
Legal form: Individual business
Address: Località La Debbia - Molino Rotato 1, 19020 Rocchetta di Vara (La Spezia), Liguria, Italy
VAT Number: 01338980111
Tax Code: MNTFNC82C55E463M
Email: ladebbiaranch@libero.it
Phone: +39 348 403 1766
The Data Controller is responsible for determining the purposes and means of personal data processing and undertakes to comply with all obligations set forth by Regulation (EU) 2016/679 (GDPR) and Italian legislation regarding personal data protection.
2. Personal data collected
We collect different types of personal data to provide and improve our services:
2.1 Data provided voluntarily
When you use our website or services, you may voluntarily provide us with the following data:
- Contact information: name, surname, email address, phone number
- Reservation data: stay dates, number of guests, special preferences
- Communication data: messages sent through contact forms or email
- Billing data: billing address, tax data (if required)
- Marketing data: consent to receive newsletters and promotional communications
2.2 Data collected automatically
When you visit our website, we automatically collect some data through cookies and similar technologies:
- Navigation data: IP address, browser type, operating system, pages visited
- Usage data: time spent, site interactions, navigation paths
- Technical data: screen resolution, browser language, time zone
- Geolocation data: approximate location based on IP address
2.3 Data collected during stay
During your stay at our facility, we may collect:
- Identification data: identity document (as required by law)
- Stay data: actual dates, services used, expenses incurred
- Satisfaction data: feedback, reviews, expressed preferences
3. Processing purposes
Your personal data is processed for the following purposes:
3.1 Purposes necessary for contract performance
- Managing bookings and reservations
- Providing accommodation and catering services
- Payment processing and invoicing
- Stay-related communications
- Customer assistance and complaint management
3.2 Purposes for legal compliance
- Mandatory communications to competent authorities (Police, Tax Agency)
- Preservation of tax and accounting documents
- Occupational safety compliance
- Management of controls and inspections
3.3 Consent-based purposes
- Sending newsletters and promotional communications
- Direct marketing via email or telephone
- User experience personalization
- Analysis and profiling for commercial purposes
3.4 Legitimate interest-based purposes
- Improving services offered
- IT security and fraud prevention
- Aggregated and anonymized statistical analysis
- Litigation management and rights protection
4. Legal basis for processing
The processing of your personal data is based on the following legal bases provided by art. 6 of GDPR:
Contract performance (art. 6, para. 1, lett. b)
For booking management, service provision and all contractual obligations.
Legal obligations compliance (art. 6, para. 1, lett. c)
To comply with obligations under tax, administrative and public security regulations.
Data subject consent (art. 6, para. 1, lett. a)
For sending promotional communications and direct marketing activities.
Legitimate interest (art. 6, para. 1, lett. f)
For service improvement, security and fraud prevention.
6. Data retention
Your personal data is stored for different periods based on the processing purpose:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Booking and stay data | 10 years from checkout date | Art. 2220 Civil Code |
| Tax documents and invoices | 10 years from issue date | D.P.R. 600/1973 |
| Authority communications | 5 years from communication | Public security regulations |
| Marketing and newsletter data | 2 years from last consent | Legitimate interest |
| Access logs and cookies | 12 months | Privacy Authority provision |
| Web form contact data | 2 years from request | Legitimate interest |
At the end of the prescribed retention periods, data is securely deleted or anonymized for statistical purposes.
9. Data subject rights
In accordance with GDPR, you have the following rights regarding your personal data:
Right to information (art. 13-14)
You have the right to receive clear and transparent information about how your personal data is processed.
How to exercise: Information is provided in this Privacy Policy
Right of access (art. 15)
You have the right to know if we are processing your data and to obtain detailed information about the processing.
How to exercise: Send a written request to the email address indicated in contacts
Right to rectification (art. 16)
You have the right to obtain correction of inaccurate personal data or completion of incomplete ones.
How to exercise: Contact us specifying the data to be corrected
Right to erasure (art. 17)
You have the right to obtain deletion of your personal data under certain circumstances.
Limitations: Not applicable if retention is necessary for legal obligations
Right to restriction (art. 18)
You have the right to obtain restriction of processing in specific situations.
When applicable: Accuracy contestation, processing unlawfulness, objection
Right to portability (art. 20)
You have the right to receive your data in a structured, machine-readable format.
Format: CSV, JSON or other commonly used structured format
Right to object (art. 21)
You have the right to object to processing of your data for direct marketing purposes.
Effect: Immediate cessation of processing for contested purposes
Right to withdraw consent (art. 7)
You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
How to exercise: Unsubscribe links in emails or direct contact
How to exercise your rights
To exercise your rights, you can contact us:
- Email: ladebbiaranch@libero.it (specify "Privacy Request" in subject)
- Regular mail: LA DEBBIA RANCH DI MONTEFIORI FRANCESCA, Località La Debbia - Molino Rotato 1, 19020 Rocchetta di Vara (SP)
- Phone: +39 348 403 1766
Response time: We will provide feedback on your request within 30 days, extendable to 60 days in cases of particular complexity.
Required documentation: To ensure security, we may ask you to provide a copy of your identity document to verify your identity.
12. Contact
Data Controller
LA DEBBIA RANCH DI MONTEFIORI FRANCESCA
Località La Debbia - Molino Rotato 1
19020 Rocchetta di Vara (La Spezia)
Liguria, Italy
VAT Number: 01338980111
Tax Code: MNTFNC82C55E463M
Privacy Contacts
Email: ladebbiaranch@libero.it
Phone: +39 348 403 1766
Hours: Monday-Sunday 8:00 AM-8:00 PM
Right to complaint
You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.
The complaint can also be lodged with the supervisory authority of the Member State where you habitually reside, work or where you believe the alleged infringement occurred.