Privacy policy
Last updated: 21 September 2026
This notice explains, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), how we process the personal data of people who visit www.il-feudo.it, write to us, book a table or a room, or stay with us. We wrote it to be read: if anything is unclear, get in touch. In case of discrepancies between language versions, the Italian version prevails.
Who is the data controller
Società Agricola Fontana (Agriturismo Il Feudo), Via Monte Versa 1008, 35030 Cortelà di Vo' (PD), Italy, VAT no. IT00556280287. For any request about your data you can write to info@il-feudo.it, call +39 049 994 1118, or write by post to the address above.
We have not appointed a data protection officer (DPO), as our business does not fall within the cases where one is mandatory.
What data we process and where it comes from
- Data you give us through the website forms, by email, by phone or on WhatsApp: full name, phone, email, dates, number of people, chosen board and whatever you write in the notes.
- Allergies and intolerances, only if you choose to mention them. These are health data: we use them solely to prepare a safe meal for you.
- Booking data received from portals such as Booking.com, if you book there.
- Data needed for your stay: identity document details for the guest registration required by Italian law, and details for your receipt or invoice.
- Technical data: IP address, date and time, requested page and browser type, recorded in the hosting server logs. To protect the forms from spam we keep an encrypted fingerprint (hash) of the IP address of anyone submitting a form for 10 minutes.
- Browsing statistics, only if you accept via the banner (see our Cookie policy).
Why we process it, on what basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to your requests and managing table and room bookings, including the automatic email acknowledging receipt | Pre-contractual steps and performance of a contract (Art. 6(1)(b) GDPR) | 12 months from the request if no booking follows; otherwise for the duration of the relationship |
| Taking allergies and intolerances into account | Your explicit consent (Art. 9(2)(a) GDPR), given by writing them in the form and ticking the box | Until the end of the service or stay; then deleted together with the request |
| Legal obligations connected to your stay: reporting guests to the public security authority (Art. 109 of the Italian TULPS), tourism statistics, tax and accounting duties | Legal obligation (Art. 6(1)(c) GDPR) | Guest registration data: not kept after transmission, except submission receipts (5 years). Tax and accounting documents: 10 years |
| Website security and protecting the forms from spam | Legitimate interest (Art. 6(1)(f) GDPR) | IP fingerprint: 10 minutes. Server logs: according to the hosting provider’s schedule, normally no longer than 12 months |
| Aggregate visit statistics with Google Analytics 4 | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time | Cookies: 13 months. Data in Analytics: 14 months at most |
| Establishing or defending a legal claim in case of disputes | Legitimate interest (Art. 6(1)(f) GDPR) | For the limitation periods set by law (normally 10 years) |
We do not use your data for marketing, newsletters or profiling, and we make no automated decisions about you.
Do you have to give us your data?
The required form fields (name, phone, email, dates, number of people) are needed to reply to you: without them we cannot handle your request. Notes, allergies and consent to statistics are always optional. Guest registration data, on the other hand, is required by law: without it we cannot host you.
Who can see your data
- The people who work at Il Feudo, authorised and instructed to handle it.
- Aruba S.p.A. (Italy), which hosts the website and our mailboxes, as data processor, on servers in the European Union.
- Google Ireland Limited, only if you accepted statistics, as data processor.
- Our accountant and tax adviser, for legal duties.
- Public authorities, when the law requires it (for example the police for guest registration).
We do not sell or pass on your data to anyone. Booking.com, TripAdvisor and Meta (Facebook, Instagram, WhatsApp) are independent controllers of the data you handle through their services: their own notices apply.
Transfers outside the European Union
Form data stays within the European Union. Using Google Analytics, if you accept it, may involve transferring data to Google LLC in the United States: this takes place under the European Commission’s adequacy decision of 10 July 2023 (EU–US Data Privacy Framework), to which Google adheres, and standard contractual clauses.
Your rights
At any time you can ask us to:
- tell you what data we hold about you and give you a copy (access);
- correct inaccurate or incomplete data (rectification);
- delete it when there is no longer a reason to keep it (erasure);
- restrict its use while we check an objection of yours (restriction);
- give it to you in a commonly used format or send it to another controller (portability);
- stop processing based on our legitimate interest (objection);
- withdraw the consent you gave, without affecting the lawfulness of what happened before.
Write to info@il-feudo.it: we reply within one month. If you believe we have mishandled your data you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live.
Children
The website and forms are intended for adults. We do not knowingly collect data from children under 14 through the website; data about children staying with us is provided by their parents or guardians.
Cookies
Everything about cookies and similar tools is explained in our Cookie policy.
Changes to this notice
If the way we process data changes we will update this page: the date at the top shows the latest version.