Privacy policy

Pursuant to the General Data Protection Regulation (EU Regulation 2016/679)

Dear Data Subject, According to the aforementioned law, our data processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Pursuant to Article 13 of the GDPR 2016/679, we hereby provide the following information:

Processing referred to in the policy:

Request for information, newsletter subscription

Categories concerned:

Customers and potential customers

Data processed:

Request for information: Name and Last Name, Email, Phone, Country, Message, Number of people, Check-in date, Departure date, Author, City, Title

Newsletter subscription: Email

The data is processed in these ways:


Purpose of the processing:

The collected data is used for the provision of information and services to the User.

Upon the provision of consent, it will be used for sending promotional and informative messages.

The Data Processor and Data Controller ensure that the data subjects are processed only for the stated purpose and only using that strictly necessary for processing. They also undertake, within the limits of reasonableness, to modify and correct all data that subsequently proves to have been modified from that received originally, to keep it updated and to delete all data exceeding the declared processing.

Data concerning minors:

No data concerning minors is handled in the “Customer Management” processing.

Health, biometric and judicial data:

Health, biometric and judicial data is not handled in the “Customer Management” processing.

Duration of the processing:

Processing for “Site Management” purposes has an indefinite duration.

The company Villa Sarah Tenuta Melograni declares the “Site Management” processing has an indefinite duration as it will be kept continuously active in order to continue business operations. The Data Controller and the Data Processor will ensure that the data subjects can be assured that, once the purposes of this processing have been reached, the data will be deleted.


The processing does not concern automated or profiling processes.

Transfer of data for this processing:

Data is not transferred to non-EU countries.

Data controller:

Villa Sarah Tenuta Melograni nella persona di Progetto S.r.l. – Via di Linari 18 – CAP 50021 – Barberino val d’Elsa – Firenze – FI – P.IVA: 05557100483 – C.S. 10.000 i.v.

Data processor:

Progetto S.r.l.

Rights of the Interested Parties:

At any time, you may exercise your rights via:

  • accessing your personal data;
  • obtaining the correction of personal data or the deletion of the same or the restriction of the relative processing;
  • objecting to the processing;
  • availing of data portability;
  • revoking consent, where provided, it being understood that the withdrawal of consent does not affect the lawfulness of the processing based on the consent given prior to the revocation;
  • submitting a complaint to the Supervisory Authority (Privacy Guarantor)

Last modification: 19/11/2019