Privacy policy
This policy explains which personal data the castellodibagnolo.it website collects, for what purposes, and the rights of its visitors, under Regulation (EU) 2016/679 (GDPR).
Data controller
Soc. Agricola Castello di Bagnolo S.S.
Via Palazzo 23 – 12031 Bagnolo Piemonte (CN) – Italy
VAT no. 08262260014 – Tax code 97613730015
Email: privacy@castellodibagnolo.it
What data we collect and why
Requests sent through the website forms. When you fill in a contact or booking request form, you send us the data you enter: name and surname, email, telephone, number of guests, apartment and dates of interest, message. We use them only to answer your request and, if you wish, to prepare a quote or a booking. The legal basis is the performance of pre-contractual measures taken at your request (art. 6.1.b GDPR). The data are necessary to answer you: without them we cannot follow up your request.
Requests reach our reception by email and are not stored on the website. We keep them for as long as needed to handle the request; if a booking follows, for the period required by law, for example for tax purposes. Requests that do not lead to a booking are kept for 12 months.
Technical browsing data. Like any web server, the server hosting the website records some technical data about visits (IP address, date and time, page requested, browser type) in log files. They are used only for the operation and security of the website (legitimate interest, art. 6.1.f GDPR) and are kept for 30 days, then deleted automatically.
Visit statistics (only with your consent). If you accept statistics in the cookie banner, we use Google Analytics 4 (Google Ireland Limited) to know, in aggregate form, how many people visit the website, which pages they read, what type of device they use and from which country or region. Google Analytics 4 does not record the full IP address; we do not use these data for advertising or to profile you and we do not combine them with other data. The data are kept by Google for 2 months. The legal basis is your consent (art. 6.1.a GDPR), which you can withdraw at any time from the Cookie preferences link at the bottom of every page. Without consent statistics are not activated and the website works in the same way.
Cookie consent. The choice you make in the cookie banner is recorded by Hu-manity.co, the service that manages the banner, so that it can be respected on later visits and demonstrated if necessary. Details in the Cookie policy.
Spam protection of the forms. On pages with a form we use Cloudflare Turnstile (Cloudflare, Inc.) to check that the request is sent by a person and not by an automated program. For this purpose Cloudflare processes some technical data about the connection and the browser (for example IP address and browser type), without identifying visitors and without profiling. The legal basis is our legitimate interest in the security of the website and in not receiving automated requests (art. 6.1.f GDPR). Cloudflare’s policy: Turnstile Privacy Addendum.
The website does not use profiling or advertising tools.
Who processes data on our behalf
The website is hosted and managed by Vincasoft S.a.s., Via Manzoni 9 – 26854 Cornegliano Laudense (LO), appointed as data processor (art. 28 GDPR). The servers are located in Italy, in Turin. Data are not sold or disclosed to others, except where required by law.
Some services used by the website are based or have servers outside the European Union, in particular in the United States: Hu-manity.co (cookie banner), Cloudflare (form spam protection) and Google (statistics, only with your consent). In these cases data are transferred with the safeguards provided by the GDPR: the EU-US Data Privacy Framework, where the provider is certified, or standard contractual clauses approved by the European Commission.
Links to other websites
The website contains links to external services: Google Maps, Facebook, Instagram, YouTube, LinkedIn, Booking.com, Airbnb and review pages. No data is sent to these services until you click a link; from then on the policy of the service you open applies. The share buttons are also simple links and send no data before you click.
The only exception, and only with your consent in the cookie banner: on the Weddings page the reviews box is loaded from matrimonio.com (Wedding Planner S.L.U., Barcelona, Spain), which therefore receives the technical data of the connection (for example the IP address); its own policy applies.
Your rights
You can ask at any time to access your data, to correct or delete them, to restrict or object to their processing and to receive them in a readable format (articles 15-22 GDPR), by writing to privacy@castellodibagnolo.it. We reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Updates
This policy may be updated if the website changes. Last update: 2 November 2026.