Dear customer,
welcome to the FATTORIA DELL’AUTOSUFFICIENZA website!
As provided for by European Regulation on the protection of personal data no. 2016/679 (“RGPD” or “GDPR”) and by applicable national legislation (Legislative Decree 196/2003 as amended), we invite you to carefully read our Privacy Policy, which applies when accessing this website and deciding to browse within it and/or use its services. This notice is provided and is valid only on this website (autosufficienza.it) and not for other websites that may be consulted by the user via links present on the site. FATTORIA DELL’AUTOSUFFICIENZA has no control over these sites nor over the procedures they apply for respecting data privacy and, therefore, suggests consulting the privacy policies of all parties you come into contact with before communicating personal information.
Data Controller
The Data Controller for data acquired through this website is:
LA FATTORIA DELL’AUTOSUFFICIENZA – AGRICULTURAL LIMITED LIABILITY COMPANY BENEFIT CORPORATION
VAT No. 03777150404
Registered office: Loc. Paganico snc, 47021 Bagno di Romagna (FC)
Email: [email protected]
Types of data processed, purposes and legal bases, retention
Browsing data
The software applications responsible for the operation of the website acquire certain personal data transmitted via secure protocols. Such information is not collected to be associated with identified data subjects but could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses, browser identifiers (user agent), URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server (for example, success, error) and other parameters relating to the user’s operating system and IT environment. These data are used in order to obtain anonymous statistical information on the use of the site and to monitor its correct functioning with the aim of blocking attempts to damage the site itself or to cause harm to other users, or in any case harmful activities. Visit our cookie policy here.
Data voluntarily provided by the user
The user is only required to provide personal data (e.g. name, surname, email, telephone number, etc.) when they wish to get in touch or make use of the services offered on this website. In such cases, the user is provided with appropriate information in this regard and, where necessary, is invited to give their consent. The processing of the data provided will be carried out in accordance with the purposes and methods set out in this privacy notice and in the specific information made available from time to time.
Request for information / contact
Data provided directly by the data subject through the sending of communications using the contact addresses available on the site or by completing the form for contact/information requests.
The explicit and voluntary sending of messages to the contact addresses on this site, or the completion and submission of the information request form, entails the acquisition of the sender’s contact details, as well as all personal data included in the communications. Such data is processed for the following purposes and in compliance with the relevant legal bases of processing, for a retention period not exceeding that necessary for the purposes for which it was collected and processed.
Type of data processed: name, surname, email, telephone, message.
Purpose of processing: managing the request submitted by the user and providing the requested service (e.g. request for information regarding the structure, the services provided, activities and events).
Legal Basis: art. 6 para. 1) lett. b) of the GDPR; the processing is necessary to respond to the user’s requests; for the execution of pre-contractual and contractual measures adopted at the request of the data subject.
Data retention: the user’s requests and the data contained therein will be retained only for the time necessary to enable the Data Controller to identify the correct closure of the request itself and, in any case, for as long as may be necessary to protect the Data Controller’s interests from potential liability. At the end of this period, data that permits identification, even indirectly, will be anonymised and retained in the form of aggregated data for statistical purposes.
Within the site, it is possible to use the service provided by the WhatsApp platform to request information of a commercial nature; data is transferred to the service provider for the provision of the service itself, and processing takes place in the manner specified by the service’s privacy policy: Whatsapp privacy policy. The user is informed that, by using the instant messaging system present on the website, any personal data entered in communications may be subject to transfer outside the EU.
Newsletter
In the event of specific consent (by registering for our newsletter), LA FATTORIA DELL’AUTOSUFFICIENZA may send information by email about our courses, retreats and stays, and educational, cultural or recreational experiences.
Newsletter subscription is optional, explicit and voluntary; this activity involves the acquisition of the sender’s contact details. The data is processed for the following purpose and in compliance with the relevant legal basis for processing, for a retention period not exceeding that necessary for the purposes for which it was collected and processed.
Type of data processed: email.
Purpose of processing: activities related to promoting the activities and services provided by Autosufficienza farm.
Legal Basis: art. 6 para. 1) lett. a) of the GDPR; The data subject’s consent – Opt out: Possibility to withdraw one’s consent in any communication/newsletter or by writing to the Data Controller. Once consent has been withdrawn, the Data Controller will no longer use personal data for such purposes, but may still retain it, particularly insofar as may be necessary in order to protect the Data Controller’s interests from potential liability based on such processing.
For the management of the newsletter, the ActiveCampaign service is used. As the services are offered worldwide, information may be used, stored and/or accessed by entities operating outside the European Economic Area (EEA). Further information on the type, scope and purpose of data processing is provided in the provider’s ActiveCampaign_privacy policy.
Unsubscribing from the service: Users may disable the service at any time through the appropriate procedure. To stop receiving the newsletter, simply click on the “Unsubscribe” button found in every newsletter email or send a communication to the Data Controller’s contact address indicated in this privacy notice.
Bookings
LA FATTORIA DELL’AUTOSUFFICIENZA will process the user’s personal data to enable the possibility of purchasing online the services made available through the Site, the conclusion of the purchase contract and for the correct execution of the obligations arising from such contract and, finally, to follow up on any requests sent by the user. LA FATTORIA DELL’AUTOSUFFICIENZA will also process users’ data to fulfil the resulting legal obligations and administrative-accounting requirements. To complete a purchase, it is possible to use different payment methods (credit card, Stripe, etc.). During the purchase procedure, the user will need to provide certain information necessary to complete the purchase and/or request the issuing of an invoice (VAT number, tax code, etc.).
The legal basis for the aforementioned processing is the fulfilment of the contract by LA FATTORIA DELL’AUTOSUFFICIENZA.
For these purposes, the data will be processed for the time strictly necessary to carry out the individual processing activities and no longer than 10 years from the moment of purchase. If required by specific regulations, the data retention period may be longer. The provision of data for this purpose is optional. However, failure to provide data, or the provision of partial or inaccurate data, may result in the Data Controller being unable to execute the online purchase contract and in the user being unable to obtain the requested service(s).
The booking service is not intended for individuals under 18 years of age, as defined by applicable law. LA FATTORIA DELL’AUTOSUFFICIENZA does not knowingly collect data, including personal data, on minors or other individuals who are not legally able to use the site and the services contained therein. Should we become aware of having collected the personal data of a minor, we will immediately proceed to delete it, unless we are required by law to retain such data. Users are requested to contact us should they believe that LA FATTORIA DELL’AUTOSUFFICIENZA has erroneously or inadvertently collected information on a minor.
For further information on the methods of management and personal data handled, please refer to what is stated in the Terms and Conditions of Sale of the site.
Further communications following a purchase
Following the completion of the purchase process, LA FATTORIA DELL’AUTOSUFFICIENZA may communicate with the user and send, via email, informative communications on the status of the booking, reminders, etc. This is soft spam limited to similar products/services, with the possibility of opt-out from the outset. The legal basis for the processing described above is the legitimate interest of the Data Controller, pursuant to Art. 130 of national legislation, it being understood that, at any time, the user will have the possibility to object to the sending of such communications, in the manner set out in this privacy notice.
Join the team
Through the appropriate form on the site, users can submit their application and attach their curriculum vitae. The personal data provided will be used exclusively to assess the profile in relation to open or future positions at LA FATTORIA DELL’AUTOSUFFICIENZA.
Type of data processed: The data processed relates in particular to identifying data (name, surname, tax code), contact details (email address, telephone), information on education, work experience and any other information included in the CV or online form, insofar as they are strictly necessary for the activities of recruitment, selection and assessment of candidates. LA FATTORIA DELL’AUTOSUFFICIENZA may process “special categories of data” pursuant to Article 9 of the GDPR, such as data capable of revealing a state of health such as belonging to protected categories, potentially contained in the CV or any additional documentation transmitted. In general, the aforementioned data is collected directly from the data subject and/or from third parties in relation to previous work experience (only with prior consent) and/or from publicly accessible sources such as professional profiles within professional social networks (within the limits set out in this notice).
Purpose of processing: The processing of data will be carried out by the Data Controller for: 1) purposes connected or instrumental to carrying out the activity of research and selection of candidates in relation to all positions managed by the Company, the assessment of profile, aptitudes and professional capabilities, aimed at establishing an employment or collaboration relationship with the Data Controller; 2) special categories of data may be processed exclusively to assess the application for job positions falling within the scope of targeted placement, in order to fulfil obligations and exercise the specific rights of the Data Controller or of the data subject in the field of employment law and social security and social protection. In the absence of such circumstances as well as in the absence of the conditions referred to in Article 9 of the GDPR, such data will not be taken into consideration and will be immediately deleted; 3) only with prior consent in order to acquire information relating to professional references from previous employers; 4) LA FATTORIA may process public information relating to profiles present on professional social networks to verify that the data provided correspond to what has been declared, limited solely to professional information useful for the selection in progress; 5) to ascertain, exercise or defend the rights of the Data Controller in extrajudicial and/or judicial proceedings.
Legal Basis: the legal bases for processing can be found in Article 6(1)(a), (b) and (f), as well as in Article 9(2)(b) of the GDPR.
Plan
Through this form, users are given the possibility to contact the company in order to request the availability of the facility for the organisation of events (space rental, ceremonies, school visits, etc.).
The completion and submission of the request for information regarding availability entails the acquisition of the sender’s contact details, as well as all personal data included in the communications. Such data is processed for the following purposes and in compliance with the relevant legal bases of processing, for a retention period not exceeding that necessary for the purposes for which it was collected and processed.
Type of data processed: name, surname, email, telephone, purpose, period, message.
Purpose of processing: management of the request sent by the user and the provision of the requested service (e.g. request for information regarding La Fattoria, the facility, availability and related organisation).
Legal Basis: art. 6 para. 1) lett. b) of the GDPR; the processing is necessary to respond to the user’s requests; for the execution of pre-contractual and contractual measures adopted at the request of the data subject.
Data retention: users’ requests and the data contained therein will be retained only for the time necessary to enable the Data Controller to identify the correct closure of the request itself and in any case for as long as may be necessary to protect the Data Controller’s interests from possible liability. In the event of acceptance for the organisation of the requested event, LA FATTORIA DELL’AUTOSUFFICIENZA will process the data for the correct execution of the obligations arising from such contract as well as to fulfil the consequent legal obligations and administrative-accounting requirements. At the end of such period, the data that permits identification, even indirectly, will be rendered anonymous and maintained, in the form of aggregated data, for statistical purposes.
Additional Purposes
In addition to the specific purposes indicated above, personal data may be processed for the following additional purposes:
- Management of contractual relationship: processing necessary to establish, manage and execute relationships with users (e.g. provision of requested services, administrative fulfilments). Data are retained for the time strictly necessary for the execution of the contractual relationship and, subsequently, for the period necessary to protect the rights of the Data Controller in the event of any disputes.
- Fulfilment of legal obligations: processing indispensable for complying with obligations provided for by laws, regulations, EU legislation or provisions issued by legitimised authorities (e.g. accounting, tax, administrative obligations). In this case, data are retained for the periods set out by applicable regulations.
- Protection in legal proceedings: processing necessary to ascertain, exercise or defend a right of the Data Controller in legal or out-of-court proceedings. Data are retained for the entire duration of the dispute and until the expiry of the limitation periods for enforceable rights.
- Statistical and site security purposes: collection and use of data in aggregated and anonymous form for statistical purposes, in order to verify the correct functioning of the site and improve the services offered, as well as processing aimed at ensuring the security of the site and users (e.g. technical logs, anti-spam filters, protection systems). Technical data that may be suitable for identifying the user (such as the IP address) are used only to the extent necessary to prevent or detect fraudulent activities or abuse and are periodically deleted.
Optionality of data provision
Users are free to decide whether or not to provide their personal data through this website and/or the services connected to it. Failure to provide data may result in the impossibility of providing the requested service, or of providing the other services available on the site. The strict requirement of any information requested is marked by the symbol (*). The provision of additional data, other than those marked as essential, is optional and does not entail any consequence regarding the pursuit of the main purpose of the collection.
Recipients and Possible Transfer of Data
The personal data will be processed by the personnel in charge of managing the website, authorised to process them in order to achieve the purposes previously indicated and who have committed to confidentiality or have received an adequate legal obligation of confidentiality.
Personal data will be processed by parties appointed as data processors insofar as they process data on behalf of the Data Controller to whom are entrusted website hosting services, technical maintenance and updates, development and implementation of features, any data backup services; providers of platforms for sending e-mails or, furthermore, parties delegated to carry out technical maintenance activities including the maintenance of network equipment and electronic communication networks, software for making payments, which provide the technological platform and payment gateway.
Personal data can be shared with:
– third parties with whom the Data Controller has ongoing contractual relationships concerning services functional to carrying out the company’s activities;
– professionals, companies or professional firms providing assistance and consultancy services in accounting, administrative, legal, tax and financial matters relating to the provision of services, etc.
The complete list of appointed data processors is available from the Data Controller.
The data may be communicated, even without consent, to all supervisory bodies responsible for inspections and checks, such as the Revenue Agency, ministerial bodies and competent authorities, local authorities, tax commissions of all levels, upon their express request, who will process them as independent data controllers for institutional purposes and/or pursuant to law during investigations and inspections.
Beyond what has been indicated, personal data is not intended for publication or dissemination. The data will be processed by the Data Controller in Italy, within the territory of the European Union and the European Economic Area. Should it become necessary for technical, organisational and/or operational reasons to make use of parties (amongst those indicated in the previous list) located outside the EEA, please be informed that the Data Controller will ensure that the processing of data by these parties takes place in compliance with applicable regulations. Therefore, transfers will be carried out through adequate safeguards, such as adequacy decisions, Standard Contractual Clause templates approved by the European Commission or other safeguards considered adequate. The data subject may request further information by writing to the Data Controller’s addresses, indicated at the beginning of this privacy notice, by ordinary post and/or email.
Methods and security of processing
The processing of personal data is carried out through IT tools suitable to guarantee the security and confidentiality of the data itself and in any case in compliance with adequate security measures as required by Article 32 GDPR, through secure communication protocols with SSL encryption algorithms. Personal data will be processed in accordance with the legislative provisions of the aforementioned regulations and the confidentiality obligations provided therein.
Sharing of site content via social networks
We are present on social media platforms to communicate with interested individuals and to inform them about our activities. The processing of personal data may also take place outside the European Economic Area (EEA). In any case, the terms and conditions of use, as well as the data protection statements and other provisions of the individual operators of such online platforms, shall apply. Such provisions provide information in particular on the rights of data subjects including, in particular, the right of access to information.
Indeed, through LA FATTORIA DELL’AUTOSUFFICIENZA website it is possible to share content through Social Networks. All “social plug-ins” present on the site are marked with the respective logo owned by the social network platform. Users are free to decide whether and which content to share on one or more social networks (Facebook, Instagram, etc.). In this case, we inform you that no personal data of the user is acquired by LA FATTORIA DELL’AUTOSUFFICIENZA and users are invited to check the settings of their account on the social network in order to identify any data potentially acquired by external platforms. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the Social Network platform, as well as for the methods through which to exercise one’s rights, please consult the specific Privacy Policy of the Social Network (Privacy Policy – Facebook, Privacy Policy – Instagram).
Data Subject Rights
Articles 15 et seq. of the GDPR confer specific rights on the data subjects concerned.
In particular, the right to obtain confirmation of the existence or otherwise of personal data, access to personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to their processing, in addition to the right to data portability, the communication of such data and the purposes on which the processing is based. Furthermore, data subjects have the right to obtain the withdrawal of consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal, the transformation into anonymous form or the blocking of data processed in violation of the law, as well as the updating or, should there be an interest in this regard, the integration of data. Data subjects have the right to object, on legitimate grounds, to the processing itself.
The exercise of such rights is not subject to any time constraints and may be carried out free of charge by contacting the Data Controller at the contact details provided at the beginning of this notice by ordinary post and/or email.
Please note that for communication purposes, it is always possible to withdraw your consent by using the appropriate link provided in each communication or by sending a specific request to the Data Controller’s email address.
Data subjects who believe that the processing of their personal data carried out through this site is in breach of the provisions of the GDPR have the right to lodge a complaint with the supervisory authority (for Italy: Garante per la protezione dei dati personali www.garanteprivacy.it), as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).
Last update: 25/06/2025
